NetSight
IP …
critical9.3Public exploit code

CVE-2010-1199

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.5, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5
MozillaSeamonkey
through 2.0.4
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaThunderbird
through 3.0.4
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-189

References