NVD

Id
12741  
Name
CVE-2010-1208  
Description
Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-30  
Modified Date
2010-11-22  
Seq
2010-1208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70246 12741 CVE-2010-1208 oval:org.mitre.oval:def:11740  View
70247 12741 CVE-2010-1208 http://www.mozilla.org/security/announce/2010/mfsa2010-35.html  View
70248 12741 CVE-2010-1208 20100721 ZDI-10-134: Mozilla Firefox DOM Attribute Cloning Remote Code Execution Vulnerability  View
70249 12741 CVE-2010-1208 41849  View
70250 12741 CVE-2010-1208 http://www.zerodayinitiative.com/advisories/ZDI-10-134/  View
70251 12741 CVE-2010-1208 https://bugzilla.mozilla.org/show_bug.cgi?id=572986  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36038 JVNDB-2010-001818 複数の Mozilla 製品の DOM 実装における任意のコードを実行される脆弱性 複数の Mozilla 製品の DOM 実装における attribute-cloning の機能性には、ノンゼロ参照カウントが付与されたイベント属性ノードの削除に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-1208 43788 CVE-2010-1208 12741 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001818.html 2010-07-20 2011-01-06 View