CVEvulnerability
CVE-2010-2759
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-189
Description
Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticated users to cause a denial of service (bug invisibility) via a crafted comment.
Affected configurations
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.9
• mozilla bugzilla 2.23.1
• mozilla bugzilla 2.23.2
• mozilla bugzilla 2.23.3
• mozilla bugzilla 2.23.4
• mozilla bugzilla 3.0
• mozilla bugzilla 3.0.0
• mozilla bugzilla 3.0.1
• mozilla bugzilla 3.0.2
• mozilla bugzilla 3.0.3
• mozilla bugzilla 3.0.4
• mozilla bugzilla 3.0.5
• mozilla bugzilla 3.0.6
• mozilla bugzilla 3.0.7
• mozilla bugzilla 3.0.8
• mozilla bugzilla 3.0.9
• mozilla bugzilla 3.0.10
• mozilla bugzilla 3.0.11
• mozilla bugzilla 3.1.0
• mozilla bugzilla 3.1.1
• mozilla bugzilla 3.1.2
• mozilla bugzilla 3.1.3
• mozilla bugzilla 3.2
• mozilla bugzilla 3.2.2
• mozilla bugzilla 3.2.3
• mozilla bugzilla 3.2.4
• mozilla bugzilla 3.2.5
• mozilla bugzilla 3.2.6
• mozilla bugzilla 3.2.7
• mozilla bugzilla 3.3.1
• mozilla bugzilla 3.3.2
• mozilla bugzilla 3.3.3
• mozilla bugzilla 3.3.4
• mozilla bugzilla 3.4.1
• mozilla bugzilla 3.4.2
• mozilla bugzilla 3.4.3
• mozilla bugzilla 3.4.4
• mozilla bugzilla 3.4.5
• mozilla bugzilla 3.4.6
• mozilla bugzilla 3.4.7
• mozilla bugzilla 3.5.1
• mozilla bugzilla 3.5.2
• mozilla bugzilla 3.5.3
• mozilla bugzilla 3.6
• mozilla bugzilla 3.6.1
• mozilla bugzilla 3.7
• mozilla bugzilla 3.7.1
• mozilla bugzilla 3.7.2
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html lists.fedoraproject.org
- http://secunia.com/advisories/40892 Vendor Advisory
- http://secunia.com/advisories/41128 secunia.com
- http://www.bugzilla.org/security/3.2.7/ www.bugzilla.org
- http://www.securityfocus.com/bid/42275 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2035 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2205 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=583690 bugzilla.mozilla.org
- https://bugzilla.redhat.com/show_bug.cgi?id=623423 bugzilla.redhat.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html lists.fedoraproject.org
- http://secunia.com/advisories/40892 Vendor Advisory
- http://secunia.com/advisories/41128 secunia.com
- http://www.bugzilla.org/security/3.2.7/ www.bugzilla.org
- http://www.securityfocus.com/bid/42275 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2035 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2205 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=583690 bugzilla.mozilla.org
- https://bugzilla.redhat.com/show_bug.cgi?id=623423 bugzilla.redhat.com