Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2753
HistoryJul 30, 2010 - 8:30 p.m.

CVE-2010-2753

2010-07-3020:30:02
CWE-416
CWE-190
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.132 Low

EPSS

Percentile

95.6%

JSON

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.

Affected configurations

NVD
Node
mozillafirefoxRange3.5–3.5.11
OR
mozillafirefoxRange3.6–3.6.7
Node
mozillaseamonkeyRange<2.0.6
Node
mozillathunderbirdRange3.0–3.0.6
OR
mozillathunderbirdMatch3.1
Node
opensuseopensuseMatch11.1
OR
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
OR
suselinux_enterprise_desktopMatch11-
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_serverMatch11-
OR
suselinux_enterprise_serverMatch11sp1
OR
suselinux_enterprise_software_development_kitMatch11-
OR
suselinux_enterprise_software_development_kitMatch11sp1

Related

threatpost 1
nessus 67
securityvulns 5
ubuntucve 2
prion 2
cve 2
zdi 2
veracode 1
cvelist 2
mozilla 2
nvd 1
redhat 4
centos 4
openvas 71
oraclelinux 3
ubuntu 2
osv 1
debian 5
fedora 20
suse 1
freebsd 1
threatpost
threatpost
Mozilla Patches Firefox DLL Load Hijacking Bug
2010-09-08 14:01:59
nessus
nessus
Mozilla Thunderbird 3.0.x < 3.0.7 Multiple Vulnerabilities
2010-09-08 00:00:00
Mozilla Thunderbird < 3.1.3 Multiple Vulnerabilities
2010-09-08 00:00:00
SeaMonkey < 2.0.7 Multiple Vulnerabilities
2010-09-08 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-40
2010-07-24 00:00:00
ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability
2010-07-24 00:00:00
Mozilla Foundation Security Advisory 2010-54
2010-09-10 00:00:00
ubuntucve
ubuntucve
CVE-2010-2753
2010-07-23 00:00:00
CVE-2010-2760
2010-09-07 00:00:00
prion
prion
Integer overflow
2010-07-30 20:30:00
Design/Logic Flaw
2010-09-09 19:00:00
cve
cve
CVE-2010-2753
2010-07-30 20:30:02
CVE-2010-2760
2010-09-09 19:00:02
zdi
zdi
Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability
2010-07-20 00:00:00
Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability
2010-09-13 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:43
cvelist
cvelist
CVE-2010-2753
2010-07-30 20:00:00
CVE-2010-2760
2010-09-09 18:00:00
mozilla
mozilla
nsTreeSelection dangling pointer remote code execution vulnerability — Mozilla
2010-07-20 00:00:00
Dangling pointer vulnerability in nsTreeSelection — Mozilla
2010-09-07 00:00:00
nvd
nvd
CVE-2010-2760
2010-09-09 19:00:02
redhat
redhat
(RHSA-2010:0546) Critical: seamonkey security update
2010-07-20 00:00:00
(RHSA-2010:0544) Moderate: thunderbird security update
2010-07-20 00:00:00
(RHSA-2010:0545) Critical: thunderbird security update
2010-07-20 00:00:00
centos
centos
seamonkey security update
2010-08-16 21:36:58
thunderbird security update
2010-08-06 23:32:55
thunderbird security update
2010-07-22 14:50:56
openvas
openvas
RedHat Update for seamonkey RHSA-2010:0546-01
2010-07-23 00:00:00
RedHat Update for seamonkey RHSA-2010:0546-01
2010-07-23 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:169 (mozilla-thunderbird)
2010-09-07 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2010-07-21 00:00:00
thunderbird security update
2010-07-21 00:00:00
firefox security update
2010-07-21 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:37
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
fedora
fedora
[SECURITY] Fedora 13 Update: sunbird-1.0-0.26.b2pre.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 13 Update: thunderbird-3.1.1-1.fc13
2010-07-23 02:48:57
[SECURITY] Fedora 12 Update: firefox-3.5.11-1.fc12
2010-07-23 02:47:25
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-10-12 16:13:47
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.132 Low

EPSS

Percentile

95.6%

JSON
Related for NVD:CVE-2010-2753
threatpost1nessus67securityvulns5ubuntucve2prion2cve2zdi2veracode1cvelist2mozilla2nvd1redhat4centos4openvas71oraclelinux3ubuntu2osv1debian5fedora20suse1freebsd1