CVE

Id
42760  
CVE No.
CVE-2010-0176  
Status
Candidate  
Description
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
466135 42760 CVE-2010-0176 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-18.html  View
466136 42760 CVE-2010-0176 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=538308  View
466137 42760 CVE-2010-0176 DEBIAN:DSA-2027  View
466138 42760 CVE-2010-0176 URL:http://www.debian.org/security/2010/dsa-2027  View
466139 42760 CVE-2010-0176 FEDORA:FEDORA-2010-5526  View
466140 42760 CVE-2010-0176 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html  View
466141 42760 CVE-2010-0176 FEDORA:FEDORA-2010-5539  View
466142 42760 CVE-2010-0176 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html  View
466143 42760 CVE-2010-0176 FEDORA:FEDORA-2010-5561  View
466144 42760 CVE-2010-0176 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html  View
466145 42760 CVE-2010-0176 MANDRIVA:MDVSA-2010:070  View
466146 42760 CVE-2010-0176 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:070  View
466147 42760 CVE-2010-0176 REDHAT:RHSA-2010:0332  View
466148 42760 CVE-2010-0176 URL:http://www.redhat.com/support/errata/RHSA-2010-0332.html  View
466149 42760 CVE-2010-0176 REDHAT:RHSA-2010:0333  View
466150 42760 CVE-2010-0176 URL:http://www.redhat.com/support/errata/RHSA-2010-0333.html  View
466151 42760 CVE-2010-0176 SUSE:SUSE-SR:2010:013  View
466152 42760 CVE-2010-0176 URL:http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html  View
466153 42760 CVE-2010-0176 UBUNTU:USN-921-1  View
466154 42760 CVE-2010-0176 URL:http://ubuntu.com/usn/usn-921-1  View
466155 42760 CVE-2010-0176 OVAL:oval:org.mitre.oval:def:11052  View
466156 42760 CVE-2010-0176 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11052  View
466157 42760 CVE-2010-0176 OVAL:oval:org.mitre.oval:def:7222  View
466158 42760 CVE-2010-0176 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7222  View
466159 42760 CVE-2010-0176 SECTRACK:1023776  View
466160 42760 CVE-2010-0176 URL:http://securitytracker.com/id?1023776  View
466161 42760 CVE-2010-0176 SECTRACK:1023782  View
466162 42760 CVE-2010-0176 URL:http://securitytracker.com/id?1023782  View
466163 42760 CVE-2010-0176 SECUNIA:38566  View
466164 42760 CVE-2010-0176 URL:http://secunia.com/advisories/38566  View
466165 42760 CVE-2010-0176 SECUNIA:39117  View
466166 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39117  View
466167 42760 CVE-2010-0176 SECUNIA:39136  View
466168 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39136  View
466169 42760 CVE-2010-0176 SECUNIA:39204  View
466170 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39204  View
466171 42760 CVE-2010-0176 SECUNIA:39240  View
466172 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39240  View
466173 42760 CVE-2010-0176 SECUNIA:39242  View
466174 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39242  View
466175 42760 CVE-2010-0176 SECUNIA:39243  View
466176 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39243  View
466177 42760 CVE-2010-0176 SECUNIA:39308  View
466178 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39308  View
466179 42760 CVE-2010-0176 SECUNIA:39397  View
466180 42760 CVE-2010-0176 URL:http://secunia.com/advisories/39397  View
466181 42760 CVE-2010-0176 VUPEN:ADV-2010-0748  View
466182 42760 CVE-2010-0176 URL:http://www.vupen.com/english/advisories/2010/0748  View
466183 42760 CVE-2010-0176 VUPEN:ADV-2010-0764  View
466184 42760 CVE-2010-0176 URL:http://www.vupen.com/english/advisories/2010/0764  View
466185 42760 CVE-2010-0176 VUPEN:ADV-2010-0765  View
466186 42760 CVE-2010-0176 URL:http://www.vupen.com/english/advisories/2010/0765  View
466187 42760 CVE-2010-0176 VUPEN:ADV-2010-0781  View
466188 42760 CVE-2010-0176 URL:http://www.vupen.com/english/advisories/2010/0781  View
466189 42760 CVE-2010-0176 VUPEN:ADV-2010-0790  View
466190 42760 CVE-2010-0176 URL:http://www.vupen.com/english/advisories/2010/0790  View
466191 42760 CVE-2010-0176 VUPEN:ADV-2010-0849  View
466192 42760 CVE-2010-0176 URL:http://www.vupen.com/english/advisories/2010/0849  View
466193 42760 CVE-2010-0176 XF:firefox-nstreecontentview-code-exec(57392)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38657 JVNDB-2010-004442 Bugzilla の Install/Filesystem.pm における重要な設定を読まれる脆弱性 Bugzilla の Install/Filesystem.pm は、use_suexec が有効になっている際、ローカル設定ファイルに対して world-readable パーミッション (誰でも読み取り可能な権限) を使用するため、重要な設定を読まれる脆弱性が存在します。 CVE-2010-0180 42760 1.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004442.html  View