CVEvulnerability

CVE-2010-1208

8.8 HIGH Published 2010-07-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-07-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.

Affected configurations

• mozilla firefox (>= 3.5 < 3.5.11) • mozilla firefox (>= 3.6 < 3.6.7) • mozilla seamonkey (< 2.0.6)

Related

Weakness · CWE (1)

Referenced by CWE · observed example (1)

References