CVEvulnerability
CVE-2010-3179
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla seamonkey (<= 2.0.8)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla thunderbird (<= 3.0.8)
• mozilla thunderbird 0.1
• mozilla thunderbird 0.2
• mozilla thunderbird 0.3
• mozilla thunderbird 0.4
• mozilla thunderbird 0.5
• mozilla thunderbird 0.6
• mozilla thunderbird 0.7
• mozilla thunderbird 0.7.1
… and 146 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html lists.fedoraproject.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2124 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-65.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0861.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0896.html www.redhat.com
- http://www.ubuntu.com/usn/USN-997-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-998-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=583077 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11675 oval.cisecurity.org
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html lists.fedoraproject.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2124 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-65.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0861.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0896.html www.redhat.com
- http://www.ubuntu.com/usn/USN-997-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-998-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=583077 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11675 oval.cisecurity.org