Published: 24/06/2010 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The JavaScript engine in Mozilla Firefox 3.6.x prior to 3.6.4 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 3.6
mozilla firefox 3.6.2
mozilla firefox 3.6.3

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

This update fixes a problem with Firefox not installing alongside the old Firefox 2 package ...

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

Martin Barbella discovered an integer overflow in an XSLT node sorting routine An attacker could exploit this to overflow a buffer and cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2010-1199) ...

This update is for use with the new Xulrunner provided in USN-930-1 ...

This update is for use with the new Xulrunner provided in USN-930-4 ...

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

Mozilla Foundation Security Advisory 2010-26 Crashes with evidence of memory corruption (rv:1924/ 19110) Announced June 22, 2010 Reporter Mozilla developers and community Impact Critical Products Firefox, SeaMonkey, Thu ...

NVD-CWE-noinfo https://bugzilla.mozilla.org/show_bug.cgi?id=557946 https://bugzilla.mozilla.org/show_bug.cgi?id=546611 http://www.securityfocus.com/bid/41050 http://www.mozilla.org/security/announce/2010/mfsa2010-26.html http://www.vupen.com/english/advisories/2010/1551 http://www.securitytracker.com/id?1024139 http://secunia.com/advisories/40326 http://www.redhat.com/support/errata/RHSA-2010-0500.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 http://www.securityfocus.com/bid/41099 http://secunia.com/advisories/40323 http://www.redhat.com/support/errata/RHSA-2010-0501.html http://www.securitytracker.com/id?1024138 http://www.vupen.com/english/advisories/2010/1557 http://support.avaya.com/css/P8/documents/100091069 http://secunia.com/advisories/40401 http://ubuntu.com/usn/usn-930-1 http://www.ubuntu.com/usn/usn-930-2 http://www.vupen.com/english/advisories/2010/1640 http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html http://secunia.com/advisories/40481 http://www.vupen.com/english/advisories/2010/1773 https://exchange.xforce.ibmcloud.com/vulnerabilities/59662 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8317 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10401 https://nvd.nist.gov https://usn.ubuntu.com/930-1/

CVE-2010-1203

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect