NVD

Id
14209  
Name
CVE-2010-2766  
Description
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-09  
Modified Date
2011-07-18  
Seq
2010-2766  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78559 14209 CVE-2010-2766 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
78560 14209 CVE-2010-2766 FEDORA-2010-14362  View
78561 14209 CVE-2010-2766 SUSE-SA:2010:049  View
78562 14209 CVE-2010-2766 oval:org.mitre.oval:def:11778  View
78563 14209 CVE-2010-2766 http://support.avaya.com/css/P8/documents/100112690  View
78564 14209 CVE-2010-2766 DSA-2106  View
78565 14209 CVE-2010-2766 MDVSA-2010:173  View
78566 14209 CVE-2010-2766 http://www.mozilla.org/security/announce/2010/mfsa2010-57.html  View
78567 14209 CVE-2010-2766 43100  View
78568 14209 CVE-2010-2766 ADV-2010-2323  View
78569 14209 CVE-2010-2766 ADV-2011-0061  View
78570 14209 CVE-2010-2766 http://www.zerodayinitiative.com/advisories/ZDI-10-176/  View
78571 14209 CVE-2010-2766 https://bugzilla.mozilla.org/show_bug.cgi?id=580445  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36291 JVNDB-2010-002071 複数の Mozilla 製品の normalizeDocument 関数における任意のコードを実行される脆弱性 複数の Mozilla 製品の normalizeDocument 関数は、正規化の間、DOM ノードの削除処理を適切に行わないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-2766 45346 CVE-2010-2766 14209 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002071.html 2010-09-07 2011-05-16 View