NVD

Id
12562  
Name
CVE-2010-1028  
Description
Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff module in VulnDisco 9.0.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-03-19  
Modified Date
2010-08-21  
Seq
2010-1028  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69065 12562 CVE-2010-1028 http://blog.mozilla.com/security/2010/02/22/secunia-advisory-sa38608/  View
69066 12562 CVE-2010-1028 http://blog.mozilla.com/security/2010/03/18/update-on-secunia-advisory-sa38608/  View
69067 12562 CVE-2010-1028 http://blog.psi2.de/en/2010/02/20/going-commercial-with-firefox-vulnerabilities/  View
69068 12562 CVE-2010-1028 oval:org.mitre.oval:def:7969  View
69069 12562 CVE-2010-1028 http://www.h-online.com/security/news/item/Zero-day-exploit-for-Firefox-3-6-936124.html  View
69070 12562 CVE-2010-1028 VU#964549  View
69071 12562 CVE-2010-1028 http://www.mozilla.org/security/announce/2010/mfsa2010-08.html  View
69072 12562 CVE-2010-1028 https://bugzilla.mozilla.org/show_bug.cgi?id=552216  View
69073 12562 CVE-2010-1028 https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35425 JVNDB-2010-001205 Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 Mozilla Firefox の Web Open Fonts Format (WOFF) デコーダの復元機能に、バッファオーバーフローを引き起こす整数オーバーフローの脆弱性が存在します。 CVE-2010-1028 43608 CVE-2010-1028 12562 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001205.html 2010-03-19 2010-04-02 View