NVD

Id
15110  
Name
CVE-2010-3765  
Description
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-27  
Modified Date
2011-07-25  
Seq
2010-3765  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84549 15110 CVE-2010-3765 http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/  View
84550 15110 CVE-2010-3765 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
84551 15110 CVE-2010-3765 http://isc.sans.edu/diary.html?storyid=9817  View
84552 15110 CVE-2010-3765 FEDORA-2010-17105  View
84553 15110 CVE-2010-3765 FEDORA-2010-16883  View
84554 15110 CVE-2010-3765 FEDORA-2010-16897  View
84555 15110 CVE-2010-3765 FEDORA-2010-16885  View
84556 15110 CVE-2010-3765 http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter  View
84557 15110 CVE-2010-3765 oval:org.mitre.oval:def:12108  View
84558 15110 CVE-2010-3765 SSA:2010-305-01  View
84559 15110 CVE-2010-3765 http://support.avaya.com/css/P8/documents/100114329  View
84560 15110 CVE-2010-3765 http://support.avaya.com/css/P8/documents/100114335  View
84561 15110 CVE-2010-3765 DSA-2124  View
84562 15110 CVE-2010-3765 15341  View
84563 15110 CVE-2010-3765 15342  View
84564 15110 CVE-2010-3765 15352  View
84565 15110 CVE-2010-3765 MDVSA-2010:213  View
84566 15110 CVE-2010-3765 MDVSA-2010:219  View
84567 15110 CVE-2010-3765 http://www.mozilla.org/security/announce/2010/mfsa2010-73.html  View
84568 15110 CVE-2010-3765 http://www.norman.com/about_norman/press_center/news_archive/2010/129223/  View
84569 15110 CVE-2010-3765 http://www.norman.com/security_center/virus_description_archive/129146/  View
84570 15110 CVE-2010-3765 RHSA-2010:0808  View
84571 15110 CVE-2010-3765 RHSA-2010:0809  View
84572 15110 CVE-2010-3765 RHSA-2010:0810  View
84573 15110 CVE-2010-3765 RHSA-2010:0861  View
84574 15110 CVE-2010-3765 RHSA-2010:0896  View
84575 15110 CVE-2010-3765 44425  View
84576 15110 CVE-2010-3765 1024645  View
84577 15110 CVE-2010-3765 1024650  View
84578 15110 CVE-2010-3765 1024651  View
84579 15110 CVE-2010-3765 USN-1011-1  View
84580 15110 CVE-2010-3765 USN-1011-2  View
84581 15110 CVE-2010-3765 USN-1011-3  View
84582 15110 CVE-2010-3765 ADV-2010-2837  View
84583 15110 CVE-2010-3765 ADV-2010-2857  View
84584 15110 CVE-2010-3765 ADV-2010-2864  View
84585 15110 CVE-2010-3765 ADV-2010-2871  View
84586 15110 CVE-2010-3765 ADV-2011-0061  View
84587 15110 CVE-2010-3765 https://bugzilla.mozilla.org/show_bug.cgi?id=607222  View
84588 15110 CVE-2010-3765 https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53  View
84589 15110 CVE-2010-3765 https://bugzilla.redhat.com/show_bug.cgi?id=646997  View
84590 15110 CVE-2010-3765 RHSA-2010:0812  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36522 JVNDB-2010-002302 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品には、nsCSSFrameConstructor::ContentAppended、appendChild method、不正なインデックストラッキング および 複数のフレーム作成に関する処理に不備があるため、JavaScript が有効の際、任意のコードを実行される脆弱性が存在します。 CVE-2010-3765 46345 CVE-2010-3765 15110 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002302.html 2010-10-27 2011-05-18 View