NVD

Id
14196  
Name
CVE-2010-2753  
Description
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-30  
Modified Date
2010-11-06  
Seq
2010-2753  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78424 14196 CVE-2010-2753 SUSE-SA:2010:049  View
78425 14196 CVE-2010-2753 oval:org.mitre.oval:def:10958  View
78426 14196 CVE-2010-2753 http://www.mozilla.org/security/announce/2010/mfsa2010-40.html  View
78427 14196 CVE-2010-2753 20100721 ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability  View
78428 14196 CVE-2010-2753 41853  View
78429 14196 CVE-2010-2753 http://www.zerodayinitiative.com/advisories/ZDI-10-131/  View
78430 14196 CVE-2010-2753 https://bugzilla.mozilla.org/show_bug.cgi?id=571106  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36037 JVNDB-2010-001817 複数の Mozilla 製品における整数オーバーフローの脆弱性 複数の Mozilla 製品には、XUL ツリー要素内の、サイズが過度に大きな selection 属性の処理に関して不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2010-2753 45333 CVE-2010-2753 14196 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001817.html 2010-07-20 2011-01-06 View