Published: 30/07/2010 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x prior to 3.6.7 and Thunderbird 3.1.x prior to 3.1.1 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 3.6.1
mozilla firefox 3.6.4
mozilla firefox 3.6.6
mozilla firefox 3.6.2
mozilla firefox 3.6.3
mozilla thunderbird 3.1

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix several security issues are now availablefor Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulner ...

This update is for use with the new Xulrunner provided in USN-930-4 ...

Several flaws were discovered in the browser engine of Thunderbird If a user were tricked into viewing malicious content, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program (CVE-2010-1211, CVE-2010-1212) ...

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

Mozilla Foundation Security Advisory 2010-34 Miscellaneous memory safety hazards (rv:1927/ 19111) Announced July 20, 2010 Reporter Mozilla developers and community Impact Critical Products Firefox, SeaMonkey, Thunderbir ...

CWE-119 https://bugzilla.mozilla.org/show_bug.cgi?id=530955 https://bugzilla.mozilla.org/show_bug.cgi?id=568855 https://bugzilla.mozilla.org/show_bug.cgi?id=558618 http://www.mozilla.org/security/announce/2010/mfsa2010-34.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11771 https://access.redhat.com/errata/RHSA-2010:0547 https://nvd.nist.gov https://usn.ubuntu.com/930-5/

CVE-2010-1212

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect