Lucene search

K
cve[email protected]CVE-2010-3767
HistoryDec 10, 2010 - 7:00 p.m.

CVE-2010-3767

2010-12-1019:00:00
CWE-189
web.nvd.nist.gov
55
cve-2010-3767
integer overflow
mozilla firefox
seamonkey
nvd
javascript
array
arbitrary code

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.4 Low

EPSS

Percentile

97.3%

Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via a JavaScript array with many elements.

References

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.4 Low

EPSS

Percentile

97.3%