Published: 30/07/2010 Updated: 19/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 3.6.7

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix a security issue are now availablefor Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulnerability Scori ...

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox and xulrunner packages that fix a security issue are nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulne ...

Synopsis Critical: seamonkey security update Type/Severity Security Advisory: Critical Topic Updated seamonkey packages that fix a security issue are nowavailable for Red Hat Enterprise Linux 3 and 4The Red Hat Security Response Team has rated this update as having criticalsecurity impact Common Vulnerabi ...

Firefox could be made to run programs as your login if it opened a specially crafted file or website ...

Mozilla Foundation Security Advisory 2010-48 Dangling pointer crash regression from plugin parameter array fix Announced July 20, 2010 Reporter Daniel Holbert Impact Critical Products Firefox Fixed in ...

CWE-399 https://bugzilla.mozilla.org/show_bug.cgi?id=575836 http://www.mozilla.org/security/announce/2010/mfsa2010-48.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11961 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2010:0558 https://usn.ubuntu.com/930-6/

CVE-2010-2755

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect