NetSight
IP …
critical9.3

CVE-2010-3167

The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2…

Impact

The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.6, 3.6.2, 3.6.3, 3.6.4, 3.6.6, 3.6.7
MozillaSeamonkey
through 2.0.6
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaThunderbird
through 3.0.6
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-119CWE-399

References