CVEvulnerability
CVE-2010-3180
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla seamonkey (<= 2.0.8)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla thunderbird (<= 3.0.8)
• mozilla thunderbird 0.1
• mozilla thunderbird 0.2
• mozilla thunderbird 0.3
• mozilla thunderbird 0.4
• mozilla thunderbird 0.5
• mozilla thunderbird 0.6
• mozilla thunderbird 0.7
• mozilla thunderbird 0.7.1
… and 146 more
Related
Weakness · not in database (1)
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html lists.fedoraproject.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100114250 support.avaya.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2124 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-66.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0780.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0781.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0861.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0896.html www.redhat.com
- http://www.securityfocus.com/bid/44248 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-997-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-998-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=588929 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12158 oval.cisecurity.org
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html lists.fedoraproject.org
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100114250 support.avaya.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2124 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-66.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0780.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0781.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0861.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0896.html www.redhat.com
- http://www.securityfocus.com/bid/44248 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-997-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-998-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=588929 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12158 oval.cisecurity.org