CVEvulnerability
CVE-2010-0175
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
Affected configurations
• mozilla firefox (<= 3.0.17)
• mozilla firefox 0.1
• mozilla firefox 0.2
• mozilla firefox 0.3
• mozilla firefox 0.4
• mozilla firefox 0.5
• mozilla firefox 0.6
• mozilla firefox 0.6.1
• mozilla firefox 0.7
• mozilla firefox 0.7.1
• mozilla firefox 0.8
• mozilla firefox 0.9
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.10
• mozilla firefox 0.10.1
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 1.5.1
• mozilla firefox 1.5.2
• mozilla firefox 1.5.3
• mozilla firefox 1.5.4
• mozilla firefox 1.5.5
• mozilla firefox 1.5.6
• mozilla firefox 1.5.7
• mozilla firefox 1.5.8
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 2.0.0.10
• mozilla firefox 2.0.0.11
• mozilla firefox 2.0.0.12
… and 129 more
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/38566 Vendor Advisory
- http://secunia.com/advisories/39117 Vendor Advisory
- http://secunia.com/advisories/39136 Vendor Advisory
- http://secunia.com/advisories/39204 Vendor Advisory
- http://secunia.com/advisories/39240 Vendor Advisory
- http://secunia.com/advisories/39242 Vendor Advisory
- http://secunia.com/advisories/39243 Vendor Advisory
- http://secunia.com/advisories/39308 secunia.com
- http://secunia.com/advisories/39397 secunia.com
- http://securitytracker.com/id?1023780 securitytracker.com
- http://securitytracker.com/id?1023782 securitytracker.com
- http://ubuntu.com/usn/usn-921-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-2027 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:070 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-17.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0332.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0333.html www.redhat.com
- http://www.securityfocus.com/archive/1/510542/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0748 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0764 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0765 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0781 www.vupen.com
- http://www.vupen.com/english/advisories/2010/0790 www.vupen.com
- http://www.vupen.com/english/advisories/2010/0849 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-10-050 www.zerodayinitiative.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=375928 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=540100 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57390 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834 oval.cisecurity.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/38566 Vendor Advisory
- http://secunia.com/advisories/39117 Vendor Advisory
- http://secunia.com/advisories/39136 Vendor Advisory
- http://secunia.com/advisories/39204 Vendor Advisory
- http://secunia.com/advisories/39240 Vendor Advisory
- http://secunia.com/advisories/39242 Vendor Advisory
- http://secunia.com/advisories/39243 Vendor Advisory
- http://secunia.com/advisories/39308 secunia.com
- http://secunia.com/advisories/39397 secunia.com
- http://securitytracker.com/id?1023780 securitytracker.com
- http://securitytracker.com/id?1023782 securitytracker.com
- http://ubuntu.com/usn/usn-921-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-2027 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:070 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-17.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0332.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0333.html www.redhat.com
- http://www.securityfocus.com/archive/1/510542/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0748 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0764 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0765 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0781 www.vupen.com
- http://www.vupen.com/english/advisories/2010/0790 www.vupen.com
- http://www.vupen.com/english/advisories/2010/0849 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-10-050 www.zerodayinitiative.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=375928 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=540100 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57390 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834 oval.cisecurity.org