NVD

Id
14600  
Name
CVE-2010-3182  
Description
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-21  
Modified Date
2012-01-26  
Seq
2010-3182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80917 14600 CVE-2010-3182 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
80918 14600 CVE-2010-3182 FEDORA-2010-16897  View
80919 14600 CVE-2010-3182 FEDORA-2010-16885  View
80920 14600 CVE-2010-3182 oval:org.mitre.oval:def:13844  View
80921 14600 CVE-2010-3182 http://support.avaya.com/css/P8/documents/100114250  View
80922 14600 CVE-2010-3182 http://support.avaya.com/css/P8/documents/100120156  View
80923 14600 CVE-2010-3182 MDVSA-2010:210  View
80924 14600 CVE-2010-3182 MDVSA-2010:211  View
80925 14600 CVE-2010-3182 http://www.mozilla.org/security/announce/2010/mfsa2010-71.html  View
80926 14600 CVE-2010-3182 RHSA-2010:0780  View
80927 14600 CVE-2010-3182 RHSA-2010:0781  View
80928 14600 CVE-2010-3182 RHSA-2010:0782  View
80929 14600 CVE-2010-3182 RHSA-2010:0861  View
80930 14600 CVE-2010-3182 RHSA-2010:0896  View
80931 14600 CVE-2010-3182 44251  View
80932 14600 CVE-2010-3182 USN-997-1  View
80933 14600 CVE-2010-3182 USN-998-1  View
80934 14600 CVE-2010-3182 ADV-2011-0061  View
80935 14600 CVE-2010-3182 https://bugzilla.mozilla.org/show_bug.cgi?id=590753  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36505 JVNDB-2010-002285 Linux 上で稼働する複数の Mozilla 製品における application-launch スクリプトに関する権限昇格の脆弱性 Linux 上で稼働する複数の Mozilla 製品の application-launch スクリプトは、 LD_LIBRARY_PATH 内に zero-length ディレクトリ名を配置するため、権限を取得される脆弱性が存在します。 CVE-2010-3182 45762 CVE-2010-3182 14600 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002285.html 2010-10-19 2011-01-27 View