NVD

Id
11752  
Name
CVE-2010-0177  
Description
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-04-05  
Modified Date
2013-07-12  
Seq
2010-0177  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64632 11752 CVE-2010-0177 SUSE-SR:2010:013  View
64633 11752 CVE-2010-0177 oval:org.mitre.oval:def:10833  View
64634 11752 CVE-2010-0177 oval:org.mitre.oval:def:7622  View
64635 11752 CVE-2010-0177 1023776  View
64636 11752 CVE-2010-0177 USN-921-1  View
64637 11752 CVE-2010-0177 DSA-2027  View
64638 11752 CVE-2010-0177 MDVSA-2010:070  View
64639 11752 CVE-2010-0177 http://www.mozilla.org/security/announce/2010/mfsa2010-19.html  View
64640 11752 CVE-2010-0177 RHSA-2010:0332  View
64641 11752 CVE-2010-0177 RHSA-2010:0333  View
64642 11752 CVE-2010-0177 20100402 ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability  View
64643 11752 CVE-2010-0177 ADV-2010-0748  View
64644 11752 CVE-2010-0177 ADV-2010-0764  View
64645 11752 CVE-2010-0177 ADV-2010-0765  View
64646 11752 CVE-2010-0177 ADV-2010-0781  View
64647 11752 CVE-2010-0177 ADV-2010-0849  View
64648 11752 CVE-2010-0177 http://www.zerodayinitiative.com/advisories/ZDI-10-049  View
64649 11752 CVE-2010-0177 firefox-nspluginarray-code-execution(57393)  View
64650 11752 CVE-2010-0177 https://bugzilla.mozilla.org/show_bug.cgi?id=538310  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35515 JVNDB-2010-001295 Mozilla Firefox/SeaMonkey における任意のコードを実行される脆弱性 Mozilla Firefox/SeaMonkey には、アクティブ中の配列の要素を参照している間に window.navigator.plugins 配列のコンテンツを解放するため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0177 42757 CVE-2010-0177 11752 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001295.html 2010-03-30 2010-08-04 View