CVE

Id
43792  
CVE No.
CVE-2010-1208  
Status
Candidate  
Description
Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.  
Phase
Assigned (20100330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
477291 43792 CVE-2010-1208 BUGTRAQ:20100721 ZDI-10-134: Mozilla Firefox DOM Attribute Cloning Remote Code Execution Vulnerability  View
477292 43792 CVE-2010-1208 URL:http://www.securityfocus.com/archive/1/512515  View
477293 43792 CVE-2010-1208 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-134/  View
477294 43792 CVE-2010-1208 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-35.html  View
477295 43792 CVE-2010-1208 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=572986  View
477296 43792 CVE-2010-1208 BID:41849  View
477297 43792 CVE-2010-1208 URL:http://www.securityfocus.com/bid/41849  View
477298 43792 CVE-2010-1208 OVAL:oval:org.mitre.oval:def:11740  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36035 JVNDB-2010-001815 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 複数の Mozilla 製品 のブラウザエンジン内の js/src/jstracer.cpp には、TraceRecorder::record_JSOP_BINDNAME、 TraceRecorder::record_JSOP_GETELEM および TraceRecorder::record_JSOP_ARGSUB 関数の処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-1212 43792 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001815.html  View