CVE
- Id
- 46356
- CVE No.
- CVE-2010-3772
- Status
- Candidate
- Description
- Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element.
- Phase
- Assigned (20101005)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
Id | CVE Id | CVE No. | Reference | Actions |
---|---|---|---|---|
505585 | 46356 | CVE-2010-3772 | CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-77.html | View |
505586 | 46356 | CVE-2010-3772 | CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=594547 | View |
505587 | 46356 | CVE-2010-3772 | CONFIRM:http://support.avaya.com/css/P8/documents/100124650 | View |
505588 | 46356 | CVE-2010-3772 | DEBIAN:DSA-2132 | View |
505589 | 46356 | CVE-2010-3772 | URL:http://www.debian.org/security/2010/dsa-2132 | View |
505590 | 46356 | CVE-2010-3772 | FEDORA:FEDORA-2010-18773 | View |
505591 | 46356 | CVE-2010-3772 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html | View |
505592 | 46356 | CVE-2010-3772 | FEDORA:FEDORA-2010-18775 | View |
505593 | 46356 | CVE-2010-3772 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html | View |
505594 | 46356 | CVE-2010-3772 | FEDORA:FEDORA-2010-18890 | View |
505595 | 46356 | CVE-2010-3772 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html | View |
505596 | 46356 | CVE-2010-3772 | FEDORA:FEDORA-2010-18920 | View |
505597 | 46356 | CVE-2010-3772 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052504.html | View |
505598 | 46356 | CVE-2010-3772 | MANDRIVA:MDVSA-2010:251 | View |
505599 | 46356 | CVE-2010-3772 | URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:251 | View |
505600 | 46356 | CVE-2010-3772 | REDHAT:RHSA-2010:0966 | View |
505601 | 46356 | CVE-2010-3772 | URL:http://www.redhat.com/support/errata/RHSA-2010-0966.html | View |
505602 | 46356 | CVE-2010-3772 | REDHAT:RHSA-2010:0967 | View |
505603 | 46356 | CVE-2010-3772 | URL:http://www.redhat.com/support/errata/RHSA-2010-0967.html | View |
505604 | 46356 | CVE-2010-3772 | REDHAT:RHSA-2010:0968 | View |
505605 | 46356 | CVE-2010-3772 | URL:http://www.redhat.com/support/errata/RHSA-2010-0968.html | View |
505606 | 46356 | CVE-2010-3772 | SUSE:SUSE-SA:2011:003 | View |
505607 | 46356 | CVE-2010-3772 | URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html | View |
505608 | 46356 | CVE-2010-3772 | UBUNTU:USN-1019-1 | View |
505609 | 46356 | CVE-2010-3772 | URL:http://www.ubuntu.com/usn/USN-1019-1 | View |
505610 | 46356 | CVE-2010-3772 | BID:45351 | View |
505611 | 46356 | CVE-2010-3772 | URL:http://www.securityfocus.com/bid/45351 | View |
505612 | 46356 | CVE-2010-3772 | OVAL:oval:org.mitre.oval:def:12324 | View |
505613 | 46356 | CVE-2010-3772 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12324 | View |
505614 | 46356 | CVE-2010-3772 | SECTRACK:1024848 | View |
505615 | 46356 | CVE-2010-3772 | URL:http://www.securitytracker.com/id?1024848 | View |
505616 | 46356 | CVE-2010-3772 | SECUNIA:42716 | View |
505617 | 46356 | CVE-2010-3772 | URL:http://secunia.com/advisories/42716 | View |
505618 | 46356 | CVE-2010-3772 | SECUNIA:42818 | View |
505619 | 46356 | CVE-2010-3772 | URL:http://secunia.com/advisories/42818 | View |
505620 | 46356 | CVE-2010-3772 | VUPEN:ADV-2011-0030 | View |
Related JVN
Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
---|---|---|---|---|---|---|---|---|---|
36787 | JVNDB-2010-002567 | 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 | 複数の Mozilla 製品のブラウザエンジンには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 | CVE-2010-3776 | 46356 | 9.3 | http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002567.html | View |