PT-2010-5065

CVE-2010-3777

Published

2010-12-09

Updated

2024-06-15

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.6.x prior to 3.6.13 Thunderbird versions 3.1.x prior to 3.1.7

Description The issue allows remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

Recommendations For Mozilla Firefox versions 3.6.x prior to 3.6.13, update to version 3.6.13 or later. For Thunderbird versions 3.1.x prior to 3.1.7, update to version 3.1.7 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Igor Bukanov

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2010-3777