CVE

Id
46353  
CVE No.
CVE-2010-3769  
Status
Candidate  
Description
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505492 46353 CVE-2010-3769 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-75.html  View
505493 46353 CVE-2010-3769 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=608336  View
505494 46353 CVE-2010-3769 DEBIAN:DSA-2132  View
505495 46353 CVE-2010-3769 URL:http://www.debian.org/security/2010/dsa-2132  View
505496 46353 CVE-2010-3769 FEDORA:FEDORA-2010-18890  View
505497 46353 CVE-2010-3769 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html  View
505498 46353 CVE-2010-3769 FEDORA:FEDORA-2010-18920  View
505499 46353 CVE-2010-3769 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052504.html  View
505500 46353 CVE-2010-3769 MANDRIVA:MDVSA-2010:251  View
505501 46353 CVE-2010-3769 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:251  View
505502 46353 CVE-2010-3769 MANDRIVA:MDVSA-2010:258  View
505503 46353 CVE-2010-3769 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:258  View
505504 46353 CVE-2010-3769 SUSE:SUSE-SA:2011:003  View
505505 46353 CVE-2010-3769 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html  View
505506 46353 CVE-2010-3769 BID:45345  View
505507 46353 CVE-2010-3769 URL:http://www.securityfocus.com/bid/45345  View
505508 46353 CVE-2010-3769 OSVDB:69771  View
505509 46353 CVE-2010-3769 URL:http://osvdb.org/69771  View
505510 46353 CVE-2010-3769 OVAL:oval:org.mitre.oval:def:12342  View
505511 46353 CVE-2010-3769 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12342  View
505512 46353 CVE-2010-3769 SECTRACK:1024846  View
505513 46353 CVE-2010-3769 URL:http://www.securitytracker.com/id?1024846  View
505514 46353 CVE-2010-3769 SECTRACK:1024848  View
505515 46353 CVE-2010-3769 URL:http://www.securitytracker.com/id?1024848  View
505516 46353 CVE-2010-3769 SECUNIA:42716  View
505517 46353 CVE-2010-3769 URL:http://secunia.com/advisories/42716  View
505518 46353 CVE-2010-3769 SECUNIA:42818  View
505519 46353 CVE-2010-3769 URL:http://secunia.com/advisories/42818  View
505520 46353 CVE-2010-3769 VUPEN:ADV-2011-0030  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36797 JVNDB-2010-002577 Mozilla Firefox および SeaMonkey における任意の JavaScript を実行される脆弱性 Mozilla Firefox および SeaMonkey は、Firebug アドオンの XMLHttpRequestSpy モジュールが使用されている場合、XMLHttpRequestSpy オブジェクトと chrome 特権オブジェクトの処理に関して不備があるため、任意の JavaScript を実行される脆弱性が存在します。 CVE-2010-3773 46353 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002577.html  View