NVD

Id
14601  
Name
CVE-2010-3183  
Description
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-21  
Modified Date
2011-07-18  
Seq
2010-3183  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80936 14601 CVE-2010-3183 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
80937 14601 CVE-2010-3183 FEDORA-2010-16897  View
80938 14601 CVE-2010-3183 FEDORA-2010-16885  View
80939 14601 CVE-2010-3183 oval:org.mitre.oval:def:11891  View
80940 14601 CVE-2010-3183 http://support.avaya.com/css/P8/documents/100120156  View
80941 14601 CVE-2010-3183 DSA-2124  View
80942 14601 CVE-2010-3183 MDVSA-2010:210  View
80943 14601 CVE-2010-3183 MDVSA-2010:211  View
80944 14601 CVE-2010-3183 http://www.mozilla.org/security/announce/2010/mfsa2010-67.html  View
80945 14601 CVE-2010-3183 RHSA-2010:0782  View
80946 14601 CVE-2010-3183 RHSA-2010:0861  View
80947 14601 CVE-2010-3183 RHSA-2010:0896  View
80948 14601 CVE-2010-3183 44249  View
80949 14601 CVE-2010-3183 USN-997-1  View
80950 14601 CVE-2010-3183 USN-998-1  View
80951 14601 CVE-2010-3183 ADV-2011-0061  View
80952 14601 CVE-2010-3183 http://www.zerodayinitiative.com/advisories/ZDI-10-219/  View
80953 14601 CVE-2010-3183 https://bugzilla.mozilla.org/show_bug.cgi?id=598669  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36510 JVNDB-2010-002290 複数の Mozilla 製品の LookupGetterOrSetter 関数における任意のコードを実行される脆弱性 複数の Mozilla 製品の LookupGetterOrSetter 関数は、引数が不足している window.__lookupGetter__ 関数の呼び出しを適切にサポートしないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3183 45763 CVE-2010-3183 14601 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002290.html 2010-10-19 2011-05-18 View