CVE-2010-3765 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2010-3765
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2010-3765

Description: Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-1011-1 http://www.ubuntu.com/usn/USN-1011-3 http://www.ubuntu.com/usn/USN-1011-2 ST 1024650 1024651 1024645 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706 SAID Secunia Advisory: SA41966 Secunia Advisory: SA41969 Secunia Advisory: SA42008 Secunia Advisory: SA42043 Secunia Advisory: SA41761 Secunia Advisory: SA41965 Secunia Advisory: SA41975 Secunia Advisory: SA42003 Secunia Advisory: SA42867 REDHAT http://www.redhat.com/support/errata/RHSA-2010-0896.html http://www.redhat.com/support/errata/RHSA-2010-0861.html http://www.redhat.com/support/errata/RHSA-2010-0808.html http://www.redhat.com/support/errata/RHSA-2010-0810.html http://www.redhat.com/support/errata/RHSA-2010-0809.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12108 MISC http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter http://www.norman.com/security_center/virus_description_archive/129146/ http://www.norman.com/about_norman/press_center/news_archive/2010/129223/ http://isc.sans.edu/diary.html?storyid=9817 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2010:219 http://www.mandriva.com/security/advisories?name=MDVSA-2010:213 FEDORA http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html EXPLOIT-DB http://www.exploit-db.com/exploits/15352 http://www.exploit-db.com/exploits/15342 http://www.exploit-db.com/exploits/15341 DEBIAN http://www.debian.org/security/2010/dsa-2124 CONFIRM http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox http://support.avaya.com/css/P8/documents/100114335 http://support.avaya.com/css/P8/documents/100114329 http://www.mozilla.org/security/announce/2010/mfsa2010-73.html http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ BID 44425

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability