CVEvulnerability

CVE-2010-2753

8.8 HIGH Published 2010-07-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-07-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190, CWE-416

Description

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.

Affected configurations

• mozilla firefox (>= 3.5 < 3.5.11) • mozilla firefox (>= 3.6 < 3.6.7) • mozilla seamonkey (< 2.0.6) • mozilla thunderbird (>= 3.0 < 3.0.6) • mozilla thunderbird 3.1 • opensuse opensuse 11.1 • opensuse opensuse 11.2 • opensuse opensuse 11.3 • suse linux enterprise desktop 11 • suse linux enterprise server 11 • suse linux enterprise software development kit 11

Related

Weakness · CWE (2)

  • CWE-190 Integer Overflow or Wraparound weakness
  • CWE-416 Use After Free weakness

Referenced by CWE · observed example (2)

  • CWE-190 Integer Overflow or Wraparound weakness
  • CWE-416 Use After Free weakness

References