Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-3182
HistoryOct 21, 2010 - 7:00 p.m.

CVE-2010-3182

2010-10-2119:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
68
mozilla firefox
thunderbird
privilege escalation
cve-2010-3182
security vulnerability

8.8 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

References

Related

ubuntucve 1
veracode 1
prion 1
securityvulns 2
mozilla 1
oraclelinux 3
openvas 75
nessus 41
redhat 5
centos 3
ubuntu 2
fedora 21
freebsd 1
suse 2
gentoo 1
ubuntucve
ubuntucve
CVE-2010-3182
2010-10-19 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:48:57
prion
prion
Directory traversal
2010-10-21 19:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-71
2010-10-23 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey / NSS multiple security vulnerabilities
2010-10-23 00:00:00
mozilla
mozilla
Unsafe library loading vulnerabilities — Mozilla
2010-10-19 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2010-10-20 00:00:00
seamonkey security update
2010-10-20 00:00:00
firefox security update
2010-10-20 00:00:00
openvas
openvas
CentOS Update for thunderbird CESA-2010:0780 centos5 i386
2011-08-09 00:00:00
RedHat Update for thunderbird RHSA-2010:0780-01
2010-10-22 00:00:00
CentOS Update for thunderbird CESA-2010:0780 centos4 i386
2010-11-04 00:00:00
nessus
nessus
CentOS 4 / 5 : thunderbird (CESA-2010:0780)
2010-11-24 00:00:00
Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 4 / 5 : thunderbird (RHSA-2010:0780)
2010-10-20 00:00:00
redhat
redhat
(RHSA-2010:0780) Moderate: thunderbird security update
2010-10-19 00:00:00
(RHSA-2010:0781) Critical: seamonkey security update
2010-10-19 00:00:00
(RHSA-2010:0896) Moderate: thunderbird security update
2010-11-17 00:00:00
centos
centos
thunderbird security update
2010-10-20 14:21:34
seamonkey security update
2010-10-25 12:12:58
firefox, nss, xulrunner security update
2010-10-20 14:29:05
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-10-20 00:00:00
Firefox and Xulrunner vulnerabilities
2010-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: gnome-python2-extras-2.25.3-23.fc13
2010-10-27 22:45:51
[SECURITY] Fedora 13 Update: firefox-3.6.11-1.fc13
2010-10-27 22:45:51
[SECURITY] Fedora 13 Update: xulrunner-1.9.2.11-1.fc13
2010-10-27 22:45:51
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-10-19 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey,MozillaThunderbird
2010-11-08 11:27:17
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

8.8 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON
Related for CVE-2010-3182
ubuntucve1veracode1prion1securityvulns2mozilla1oraclelinux3openvas75nessus41redhat5centos3ubuntu2fedora21freebsd1suse2gentoo1