CVE

Id
45344  
CVE No.
CVE-2010-2760  
Status
Candidate  
Description
Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.  
Phase
Assigned (20100714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493875 45344 CVE-2010-2760 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-54.html  View
493876 45344 CVE-2010-2760 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=585815  View
493877 45344 CVE-2010-2760 CONFIRM:http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
493878 45344 CVE-2010-2760 CONFIRM:http://support.avaya.com/css/P8/documents/100110210  View
493879 45344 CVE-2010-2760 CONFIRM:http://support.avaya.com/css/P8/documents/100112690  View
493880 45344 CVE-2010-2760 DEBIAN:DSA-2106  View
493881 45344 CVE-2010-2760 URL:http://www.debian.org/security/2010/dsa-2106  View
493882 45344 CVE-2010-2760 FEDORA:FEDORA-2010-14362  View
493883 45344 CVE-2010-2760 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html  View
493884 45344 CVE-2010-2760 MANDRIVA:MDVSA-2010:173  View
493885 45344 CVE-2010-2760 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:173  View
493886 45344 CVE-2010-2760 SUSE:SUSE-SA:2010:049  View
493887 45344 CVE-2010-2760 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html  View
493888 45344 CVE-2010-2760 OVAL:oval:org.mitre.oval:def:11799  View
493889 45344 CVE-2010-2760 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11799  View
493890 45344 CVE-2010-2760 SECUNIA:42867  View
493891 45344 CVE-2010-2760 URL:http://secunia.com/advisories/42867  View
493892 45344 CVE-2010-2760 VUPEN:ADV-2010-2323  View
493893 45344 CVE-2010-2760 URL:http://www.vupen.com/english/advisories/2010/2323  View
493894 45344 CVE-2010-2760 VUPEN:ADV-2011-0061  View
493895 45344 CVE-2010-2760 URL:http://www.vupen.com/english/advisories/2011/0061  View
493896 45344 CVE-2010-2760 XF:mozilla-nstreeselection-code-execution(61660)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36293 JVNDB-2010-002073 複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性 複数の Mozilla 製品には、XMLHttpRequest オブジェクトの statusText プロパティへの読み込みアクセス権を適切に制限しないため、イントラネット上の Web サーバの存在を発見される脆弱性が存在します。 CVE-2010-2764 45344 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002073.html  View