CVE-2010-3765

EUVD-2010-3744

28.10.2010, 00:00

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	ADP	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 99%

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	3.5
mozilla	firefox	3.5.1
mozilla	firefox	3.5.2
mozilla	firefox	3.5.3
mozilla	firefox	3.5.4
mozilla	firefox	3.5.5
mozilla	firefox	3.5.6
mozilla	firefox	3.5.7
mozilla	firefox	3.5.8
mozilla	firefox	3.5.9
mozilla	firefox	3.5.10
mozilla	firefox	3.5.11
mozilla	firefox	3.5.12
mozilla	firefox	3.5.13
mozilla	firefox	3.5.14
mozilla	firefox	3.6
mozilla	firefox	3.6.2
mozilla	firefox	3.6.3
mozilla	firefox	3.6.4
mozilla	firefox	3.6.6
mozilla	firefox	3.6.7
mozilla	firefox	3.6.8
mozilla	firefox	3.6.9
mozilla	firefox	3.6.10
mozilla	firefox	3.6.11
mozilla	thunderbird	3.0.1
mozilla	thunderbird	3.0.2
mozilla	thunderbird	3.0.3
mozilla	thunderbird	3.0.4
mozilla	thunderbird	3.0.5
mozilla	thunderbird	3.0.6
mozilla	thunderbird	3.0.7
mozilla	thunderbird	3.0.8
mozilla	thunderbird	3.0.9
mozilla	thunderbird	3.1.1
mozilla	thunderbird	3.1.2
mozilla	thunderbird	3.1.3
mozilla	thunderbird	3.1.4
mozilla	thunderbird	3.1.5
mozilla	seamonkey	2.0
mozilla	seamonkey	2.0:alpha_1
mozilla	seamonkey	2.0:alpha_2
mozilla	seamonkey	2.0:alpha_3
mozilla	seamonkey	2.0:beta_1
mozilla	seamonkey	2.0:beta_2
mozilla	seamonkey	2.0:rc1
mozilla	seamonkey	2.0:rc2
mozilla	seamonkey	2.0.1
mozilla	seamonkey	2.0.2
mozilla	seamonkey	2.0.3
mozilla	seamonkey	2.0.4
mozilla	seamonkey	2.0.5
mozilla	seamonkey	2.0.6
mozilla	seamonkey	2.0.7
mozilla	seamonkey	2.0.8
mozilla	seamonkey	2.0.9

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

firefox

dapper	ignored
hardy	ignored
karmic	dne
lucid	Fixed 3.6.12+build1+nobinonly-0ubuntu0.10.04.1 released
maverick	Fixed 3.6.12+build1+nobinonly-0ubuntu0.10.10.1 released

firefox-3.0

dapper	dne
hardy	Fixed 3.6.12+build1+nobinonly-0ubuntu0.8.04.1 released
karmic	dne
lucid	dne
maverick	dne

firefox-3.5

dapper	dne
hardy	dne
karmic	Fixed 3.6.12+build1+nobinonly-0ubuntu0.9.10.1 released
lucid	dne
maverick	dne

seamonkey

dapper	dne
hardy	Fixed 2.0.10+build1+nobinonly-0ubuntu0.8.04.1 released
karmic	Fixed 2.0.10+build1+nobinonly-0ubuntu0.9.10.1 released
lucid	Fixed 2.0.10+build1+nobinonly-0ubuntu0.10.04.1 released
maverick	Fixed 2.0.10+build1+nobinonly-0ubuntu0.10.10.1 released

thunderbird

dapper	dne
hardy	Fixed 2.0.0.24+build1+nobinonly-0ubuntu0.8.04.2 released
karmic	Fixed 2.0.0.24+build1+nobinonly-0ubuntu0.9.10.3 released
lucid	Fixed 3.0.10+build1+nobinonly-0ubuntu0.10.04.1 released
maverick	Fixed 3.1.6+build1+nobinonly-0ubuntu0.10.10.1 released

xulrunner-1.9.2

dapper	dne
hardy	Fixed 1.9.2.12+build1+nobinonly-0ubuntu0.8.04.1 released
karmic	Fixed 1.9.2.12+build1+nobinonly-0ubuntu0.9.10.1 released
lucid	Fixed 1.9.2.12+build1+nobinonly-0ubuntu0.10.04.1 released
maverick	Fixed 1.9.2.12+build1+nobinonly-0ubuntu0.10.10.1 released