CVEvulnerability
CVE-2010-1198
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
Affected configurations
• mozilla firefox 3.5
• mozilla firefox 3.5.1
• mozilla firefox 3.5.2
• mozilla firefox 3.5.3
• mozilla firefox 3.5.4
• mozilla firefox 3.5.5
• mozilla firefox 3.5.6
• mozilla firefox 3.5.7
• mozilla firefox 3.5.9
• mozilla seamonkey (<= 2.0.4)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html lists.opensuse.org
- http://secunia.com/advisories/40326 secunia.com
- http://secunia.com/advisories/40401 secunia.com
- http://secunia.com/advisories/40481 secunia.com
- http://support.avaya.com/css/P8/documents/100091069 support.avaya.com
- http://ubuntu.com/usn/usn-930-1 ubuntu.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-28.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0499.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0500.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0501.html www.redhat.com
- http://www.securityfocus.com/bid/41050 www.securityfocus.com
- http://www.securityfocus.com/bid/41102 www.securityfocus.com
- http://www.securitytracker.com/id?1024138 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-930-2 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/1551 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1556 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1557 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1592 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1640 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1773 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=532246 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59664 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176 oval.cisecurity.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html lists.opensuse.org
- http://secunia.com/advisories/40326 secunia.com
- http://secunia.com/advisories/40401 secunia.com
- http://secunia.com/advisories/40481 secunia.com
- http://support.avaya.com/css/P8/documents/100091069 support.avaya.com
- http://ubuntu.com/usn/usn-930-1 ubuntu.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-28.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0499.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0500.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0501.html www.redhat.com
- http://www.securityfocus.com/bid/41050 www.securityfocus.com
- http://www.securityfocus.com/bid/41102 www.securityfocus.com
- http://www.securitytracker.com/id?1024138 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-930-2 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/1551 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1556 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1557 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1592 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1640 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1773 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=532246 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59664 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176 oval.cisecurity.org