CVE-2010-1196

2010-06-2412:30:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2010-1196

integer overflow

mozilla firefox

arbitrary code execution

dom node

buffer overflow

nvd

9.9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.139 Low

EPSS

Percentile

95.6%

JSON

Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxeq3.5.3
mozilla:firefoxmozilla firefoxeq3.5.6
mozilla:firefoxmozilla firefoxeq3.5
mozilla:firefoxmozilla firefoxeq3.5.5
mozilla:firefoxmozilla firefoxeq3.5.9
mozilla:firefoxmozilla firefoxeq3.5.4
mozilla:firefoxmozilla firefoxeq3.5.7
mozilla:firefoxmozilla firefoxeq3.5.1
mozilla:firefoxmozilla firefoxeq3.5.2
mozilla:seamonkeymozilla seamonkeyeq1.1.10

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	eq	3.5.3
mozilla:firefox	mozilla firefox	eq	3.5.6
mozilla:firefox	mozilla firefox	eq	3.5
mozilla:firefox	mozilla firefox	eq	3.5.5
mozilla:firefox	mozilla firefox	eq	3.5.9
mozilla:firefox	mozilla firefox	eq	3.5.4
mozilla:firefox	mozilla firefox	eq	3.5.7
mozilla:firefox	mozilla firefox	eq	3.5.1
mozilla:firefox	mozilla firefox	eq	3.5.2
mozilla:seamonkey	mozilla seamonkey	eq	1.1.10