CVEvulnerability
CVE-2010-2760
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-09-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla seamonkey (<= 2.0.6)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0a1pre
• mozilla thunderbird (<= 3.0.6)
• mozilla thunderbird 0.1
• mozilla thunderbird 0.2
• mozilla thunderbird 0.3
• mozilla thunderbird 0.4
• mozilla thunderbird 0.5
• mozilla thunderbird 0.6
• mozilla thunderbird 0.7
• mozilla thunderbird 0.7.1
• mozilla thunderbird 0.7.2
• mozilla thunderbird 0.7.3
• mozilla thunderbird 0.8
… and 137 more
Related
Weakness · not in database (1)
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100110210 support.avaya.com
- http://support.avaya.com/css/P8/documents/100112690 support.avaya.com
- http://www.debian.org/security/2010/dsa-2106 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-54.html Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2323 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=585815 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61660 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11799 oval.cisecurity.org
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100110210 support.avaya.com
- http://support.avaya.com/css/P8/documents/100112690 support.avaya.com
- http://www.debian.org/security/2010/dsa-2106 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-54.html Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2323 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=585815 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61660 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11799 oval.cisecurity.org