Published: 30/07/2010 Updated: 19/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer overflow in Mozilla Firefox 3.5.x prior to 3.5.11 and 3.6.x prior to 3.6.7, and SeaMonkey prior to 2.0.6, allows remote malicious users to execute arbitrary code via plugin content with many parameter elements.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 3.5.2
mozilla firefox 3.5.3
mozilla firefox 3.5.4
mozilla firefox 3.6.2
mozilla firefox 3.6.3
mozilla firefox 3.5.7
mozilla firefox 3.5.9
mozilla firefox 3.5.5
mozilla firefox 3.5.6
mozilla firefox 3.6.4
mozilla firefox 3.6.6
mozilla firefox 3.5.1
mozilla firefox 3.5.10
mozilla firefox 3.6.1
mozilla seamonkey 1.0.3
mozilla seamonkey 1.0.4
mozilla seamonkey 1.1.1
mozilla seamonkey 1.1.10
mozilla seamonkey 1.0
mozilla seamonkey 1.1.16
mozilla seamonkey 1.1.17
mozilla seamonkey 1.1.6
mozilla seamonkey 1.1.7
mozilla seamonkey 2.0
mozilla seamonkey 2.0.1
mozilla seamonkey 1.0.7
mozilla seamonkey 1.0.8
mozilla seamonkey 1.1.12
mozilla seamonkey 1.1.13
mozilla seamonkey 1.1.2
mozilla seamonkey 1.1.3
mozilla seamonkey 1.1
mozilla seamonkey 2.0.4
mozilla seamonkey 2.0a1pre
mozilla seamonkey
mozilla seamonkey 1.0.5
mozilla seamonkey 1.0.6
mozilla seamonkey 1.1.11
mozilla seamonkey 1.1.18
mozilla seamonkey 1.1.19
mozilla seamonkey 1.1.8
mozilla seamonkey 1.1.9
mozilla seamonkey 2.0.2
mozilla seamonkey 2.0.3
mozilla seamonkey 1.0.1
mozilla seamonkey 1.0.2
mozilla seamonkey 1.0.9
mozilla seamonkey 1.1.14
mozilla seamonkey 1.1.15
mozilla seamonkey 1.1.4
mozilla seamonkey 1.1.5
mozilla seamonkey 1.5.0.10
mozilla seamonkey 1.5.0.8
mozilla seamonkey 1.5.0.9

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common V ...

Synopsis Critical: seamonkey security update Type/Severity Security Advisory: Critical Topic Updated seamonkey packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 3 and 4The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vu ...

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix several security issues are now availablefor Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulner ...

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-0182 Wladimir Palant discovered that security checks in XML processing were insufficiently enforced CVE-2010-0654 Chris Evans discove ...

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

This update is for use with the new Xulrunner provided in USN-930-4 ...

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

Mozilla Foundation Security Advisory 2010-37 Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability Announced July 20, 2010 Reporter J23 (via TippingPoint's Zero Day Initiative) Impact Critical Products ...

Month Of Abysssec Undisclosed Bugs - The Parameter plugin in Firefox 364 suffers from a remote code execution vulnerability ...

''' __ __ ____ _ _ ____ | \/ |/ __ \ /\ | | | | _ \ | \ / | | | | / \ | | | | |_) | | |\/| | | | |/ /\ \| | | | _ < | | | | |__| / ____ \ |__| | |_) | |_| |_|\____/_/ \_\____/|____/ wwwexploit-dbcom/moaub-17-firefox-plugin-parameter-ensurecachedattrparamarrays-remote-code-execution/ g ...

source: wwwsecurityfocuscom/bid/41842/info Mozilla Firefox and SeaMonkey are prone to a buffer-overflow vulnerability An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content A successful exploit will result in the execution of arbitrary attacker-supplied code in the context ...

CWE-189 http://www.mozilla.org/security/announce/2010/mfsa2010-37.html https://bugzilla.mozilla.org/show_bug.cgi?id=572985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2010:0544 https://www.exploit-db.com/exploits/15027/https://usn.ubuntu.com/930-6/https://www.debian.org/security/./dsa-2075

CVE-2010-1214

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect