critical9.3Public exploit code
CVE-2010-1214
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow2010-07-20 · remote · linux · Verified
- Mozilla Firefox 3.6.4 - 'Plugin' EnsureCachedAttrParamArrays Remote Code Execution2010-09-17 · dos · windows · Verified
Impact
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5, 3.5.6 |
| Mozilla | Seamonkey | through 2.0.5 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.mozilla.org/security/announce/2010/mfsa2010-37.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=572985
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685
- http://www.mozilla.org/security/announce/2010/mfsa2010-37.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=572985
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685