CVE

Id
43793  
CVE No.
CVE-2010-1209  
Status
Candidate  
Description
Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.  
Phase
Assigned (20100330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
477299 43793 CVE-2010-1209 BUGTRAQ:20100721 ZDI-10-130: Mozilla Firefox NodeIterator Remote Code Execution Vulnerability  View
477300 43793 CVE-2010-1209 URL:http://www.securityfocus.com/archive/1/512511  View
477301 43793 CVE-2010-1209 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-130/  View
477302 43793 CVE-2010-1209 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-36.html  View
477303 43793 CVE-2010-1209 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=552110  View
477304 43793 CVE-2010-1209 BID:41845  View
477305 43793 CVE-2010-1209 URL:http://www.securityfocus.com/bid/41845  View
477306 43793 CVE-2010-1209 OVAL:oval:org.mitre.oval:def:11055  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36042 JVNDB-2010-001822 複数の Mozilla 製品の Web Worker の importScripts メソッドにおける重要な情報を取得される脆弱性 複数の Mozilla 製品の Web Worker の importScripts メソッドには、コンテンツが有効な JavaScript コードを検証しないため、同一生成元ポリシーを回避される、または重要な情報を取得される脆弱性が存在します。 CVE-2010-1213 43793 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001822.html  View