Lucene search
Immunity CanvasFIREFOX_APPENDCHILDHistoryOct 28, 2010 - 12:00 a.m.
Immunity Canvas: FIREFOX_APPENDCHILD
2010-10-2800:00:00
Immunity Canvas
exploitlist.immunityinc.com
35
EPSS
0.969
Percentile
99.8%
| Name | firefox_appendchild |
|---|---|
| CVE | CVE-2010-3765 Exploit Pack |
| VENDOR: Mozilla | |
| Notes: Interleaving document.write and appendChild can lead to duplicate text | |
| frames and overrunning of text run buffers. |
This exploit can only be used from clientd.
Tested on:
Windows XP SP3 ENG with Firefox 3.6.11.
JavaScript Obfuscated.
We do not currently do process recovery in this exploit.
VersionsAffected: Firefox <=3.6.11
Repeatability: Infinite
References: [βhttps://bugzilla.mozilla.org/show_bug.cgi?id=607222β]
Date public: 10/26/2010
Related
oraclelinux
oraclelinux
xulrunner security update
2010-10-28 00:00:00
firefox security update
2010-10-28 00:00:00
seamonkey security update
2010-10-28 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : xulrunner (MDVSA-2010:213)
2010-10-29 00:00:00
RHEL 5 : xulrunner (RHSA-2010:0809)
2010-10-28 00:00:00
RHEL 4 / 5 : thunderbird (RHSA-2010:0812)
2010-10-29 00:00:00
saint
saint
Mozilla Firefox document.write and DOM insertion memory corruption
2010-11-04 00:00:00
Mozilla Firefox document.write and DOM insertion memory corruption
2010-11-04 00:00:00
Mozilla Firefox document.write and DOM insertion memory corruption
2010-11-04 00:00:00
openvas
openvas
CentOS Update for firefox CESA-2010:0808 centos4 i386
2010-11-04 00:00:00
CentOS Update for thunderbird CESA-2010:0812 centos4 i386
2010-11-16 00:00:00
RedHat Update for firefox RHSA-2010:0808-01
2010-11-04 00:00:00
seebug
seebug
Firefox Memory Corruption Proof of Concept (Simplified)
2010-10-29 00:00:00
Mozilla Firefox document.write()ζΉεΌε ζΊ’εΊζΌζ΄
2010-11-01 00:00:00
ubuntu
ubuntu
Firefox vulnerability
2010-10-28 00:00:00
Xulrunner vulnerability
2010-10-29 00:00:00
Thunderbird vulnerability
2010-10-28 00:00:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey buffer overflow
2010-11-01 00:00:00
Mozilla Foundation Security Advisory 2010-73
2010-11-01 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: firefox-3.6.12-1.fc13
2010-10-28 22:15:22
[SECURITY] Fedora 13 Update: galeon-2.0.7-35.fc13
2010-10-28 22:15:22
[SECURITY] Fedora 13 Update: gnome-python2-extras-2.25.3-24.fc13
2010-10-28 22:15:22
exploitdb
exploitdb
cve
cve
CVE-2010-3765
2010-10-28 00:00:05
ubuntucve
ubuntucve
CVE-2010-3765
2010-10-27 00:00:00
packetstorm
packetstorm
Firefox Interleaving Denial Of Service
2010-10-28 00:00:00
Mozilla Firefox Interleaving document.write / appendChild Code Execution
2011-02-19 00:00:00
Firefox Memory Corruption
2010-10-29 00:00:00
centos
centos
firefox security update
2010-10-28 22:36:12
xulrunner security update
2010-10-28 22:41:34
thunderbird security update
2010-11-01 21:24:26
prion
prion
Memory corruption
2010-10-28 00:00:00
zdt
zdt
Firefox Memory Corruption Proof of Concept (Simplified)
2010-10-29 00:00:00
cvelist
cvelist
CVE-2010-3765
2010-10-27 22:00:00
redhat
redhat
(RHSA-2010:0812) Moderate: thunderbird security update
2010-10-28 00:00:00
(RHSA-2010:0808) Critical: firefox security update
2010-10-27 00:00:00
(RHSA-2010:0810) Critical: seamonkey security update
2010-10-27 00:00:00
freebsd
freebsd
mozilla -- Heap buffer overflow mixing document.write and DOM insertion
2010-10-27 00:00:00
nvd
nvd
CVE-2010-3765
2010-10-28 00:00:05
exploitpack
exploitpack
Mozilla Firefox - Simplified Memory Corruption (PoC)
2010-10-28 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:47:44
mozilla
mozilla
Heap buffer overflow mixing document.write and DOM insertion β Mozilla
2010-10-27 00:00:00
debian
debian
[SECURITY] [DSA 2124-1] New Xulrunner packages fix several vulnerabilities
2010-11-01 20:38:35
osv
osv
xulrunner - several vulnerabilities
2010-11-01 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey,MozillaThunderbird
2010-11-08 11:27:17
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00