Lucene search
Ubuntu.comUB:CVE-2010-3769HistoryDec 10, 2010 - 12:00 a.m.
CVE-2010-3769
2010-12-1000:00:00
ubuntu.com
ubuntu.com
9
0.2 Low
EPSS
Percentile
96.3%
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x
before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and
SeaMonkey before 2.0.11 on Windows does not properly handle long strings,
which allows remote attackers to execute arbitrary code via a crafted
document.write call that triggers a buffer over-read.
Notes
| Author | Note |
|---|---|
| jdstrand | Ubuntu 11.04 (Natty Narwhal) has 4.0b7. Fixes will be in 4.0b8. thunderbird low (javascript not enabled by default) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 3.6.13+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | firefox | < 3.6.13+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | firefox | < 4.0~b8+nobinonly-0ubuntu3 | UNKNOWN |
| ubuntu | 8.04 | noarch | firefox-3.0 | < 3.6.13+build3+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | firefox-3.5 | < 3.6.13+build3+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu1 | UNKNOWN |
Related
mozilla
mozilla
prion
prion
Buffer overflow
2010-12-10 19:00:00
cvelist
cvelist
CVE-2010-3769
2010-12-10 18:00:00
cve
cve
CVE-2010-3769
2010-12-10 19:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-75
2010-12-10 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2010-12-10 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (MFSA2010-74, MFSA2010-75, MFSA2010-78) - Windows
2010-12-27 00:00:00
Mozilla Products Multiple Vulnerabilities dec-10 (Windows)
2010-12-27 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:258 (mozilla-thunderbird)
2010-12-28 00:00:00
nessus
nessus
Mozilla Thunderbird < 3.0.11 Multiple Vulnerabilities
2010-12-10 00:00:00
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:258)
2010-12-21 00:00:00
Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities
2010-12-10 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-12-11 00:00:00
debian
debian
[SECURITY] [DSA 2132-1] New xulrunner packages fix several vulnerabilities
2010-12-11 12:03:35
[BSA-013] Security Update for iceweasel
2011-01-03 06:30:25
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2011-01-05 11:25:44
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-12-09 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00