NVD

Id
14585  
Name
CVE-2010-3167  
Description
The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-09  
Modified Date
2011-07-18  
Seq
2010-3167  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80702 14585 CVE-2010-3167 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
80703 14585 CVE-2010-3167 FEDORA-2010-14362  View
80704 14585 CVE-2010-3167 SUSE-SA:2010:049  View
80705 14585 CVE-2010-3167 oval:org.mitre.oval:def:12136  View
80706 14585 CVE-2010-3167 http://support.avaya.com/css/P8/documents/100110210  View
80707 14585 CVE-2010-3167 http://support.avaya.com/css/P8/documents/100112690  View
80708 14585 CVE-2010-3167 DSA-2106  View
80709 14585 CVE-2010-3167 MDVSA-2010:173  View
80710 14585 CVE-2010-3167 http://www.mozilla.org/security/announce/2010/mfsa2010-56.html  View
80711 14585 CVE-2010-3167 43097  View
80712 14585 CVE-2010-3167 ADV-2010-2323  View
80713 14585 CVE-2010-3167 ADV-2011-0061  View
80714 14585 CVE-2010-3167 http://www.zerodayinitiative.com/advisories/ZDI-10-171/  View
80715 14585 CVE-2010-3167 mozilla-nstreecontentview-code-execution(61661)  View
80716 14585 CVE-2010-3167 https://bugzilla.mozilla.org/show_bug.cgi?id=576070  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36288 JVNDB-2010-002068 複数の Mozilla 製品の nsTreeContentView 関数における任意のコードを実行される脆弱性 複数の Mozilla 製品の nsTreeContentView 関数には、XUL ツリー内にあるノードの削除処理を適切に行わないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-3167 45747 CVE-2010-3167 14585 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002068.html 2010-09-07 2011-05-17 View