PT-2010-5054

CVE-2010-3766

·

Published

2010-12-09

·

Updated

2017-09-19

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.16 Mozilla Firefox versions 3.6.x prior to 3.6.13 SeaMonkey versions prior to 2.0.11
Description The issue involves a use-after-free vulnerability that can be exploited by remote attackers to execute arbitrary code. This is achieved through vectors involving a change to an nsDOMAttribute node.
Recommendations For Mozilla Firefox versions prior to 3.5.16, update to version 3.5.16 or later. For Mozilla Firefox versions 3.6.x prior to 3.6.13, update to version 3.6.13 or later. For SeaMonkey versions prior to 2.0.11, update to version 2.0.11 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
RHSA-2010:0966
RHSA-2010_0966
ZDI-10-264
Found an issue in the description? Have something to add? Feel free to write us 👾