NetSight
IP …
critical9.3

CVE-2010-0176

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage referenc…

Impact

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.5.7
Versions 3.6, 0.1, 0.2, 0.3, 0.4
MozillaThunderbird
through 3.0.3
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaSeamonkey
through 2.0.3
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-399

References