NVD

Id
14586  
Name
CVE-2010-3168  
Description
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-09  
Modified Date
2011-07-18  
Seq
2010-3168  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80717 14586 CVE-2010-3168 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
80718 14586 CVE-2010-3168 FEDORA-2010-14362  View
80719 14586 CVE-2010-3168 SUSE-SA:2010:049  View
80720 14586 CVE-2010-3168 oval:org.mitre.oval:def:12001  View
80721 14586 CVE-2010-3168 http://support.avaya.com/css/P8/documents/100110210  View
80722 14586 CVE-2010-3168 http://support.avaya.com/css/P8/documents/100112690  View
80723 14586 CVE-2010-3168 DSA-2106  View
80724 14586 CVE-2010-3168 MDVSA-2010:173  View
80725 14586 CVE-2010-3168 http://www.mozilla.org/security/announce/2010/mfsa2010-55.html  View
80726 14586 CVE-2010-3168 43108  View
80727 14586 CVE-2010-3168 ADV-2010-2323  View
80728 14586 CVE-2010-3168 ADV-2011-0061  View
80729 14586 CVE-2010-3168 firefox-xultree-objects-code-exec(61653)  View
80730 14586 CVE-2010-3168 https://bugzilla.mozilla.org/show_bug.cgi?id=576075  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36287 JVNDB-2010-002067 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、XUL ツリーの削除によって発生するプロパティの変化の役割を適切に制限しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-3168 45748 CVE-2010-3168 14586 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002067.html 2010-09-07 2011-05-17 View