CVE-2010-3765

CVSS V2 High 9.3 CVSS V3 None
Description
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
Overview
  • CVE ID
  • CVE-2010-3765
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2010-10-28T00:00:05
  • Last Modified Date
  • 2017-09-19T01:31:32
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.5.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:thunderbird:3.1.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9.3
  • Severity
  • HIGH
  • Exploitability Score
  • 8.6
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ Vendor Advisory
http://isc.sans.edu/diary.html?storyid=9817
http://www.norman.com/security_center/virus_description_archive/129146/
https://bugzilla.mozilla.org/show_bug.cgi?id=607222
http://www.norman.com/about_norman/press_center/news_archive/2010/129223/
https://bugzilla.redhat.com/show_bug.cgi?id=646997
https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53
http://www.mandriva.com/security/advisories?name=MDVSA-2010:219
http://www.vupen.com/english/advisories/2010/2871 Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:213
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html
https://rhn.redhat.com/errata/RHSA-2010-0812.html
http://secunia.com/advisories/42008 Vendor Advisory
http://www.mozilla.org/security/announce/2010/mfsa2010-73.html
http://www.redhat.com/support/errata/RHSA-2010-0808.html
http://www.ubuntu.com/usn/USN-1011-3
http://www.vupen.com/english/advisories/2010/2864 Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0809.html
http://www.vupen.com/english/advisories/2010/2857 Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html
http://www.redhat.com/support/errata/RHSA-2010-0810.html
http://secunia.com/advisories/41966 Vendor Advisory
http://secunia.com/advisories/41969 Vendor Advisory
http://www.securitytracker.com/id?1024650
http://www.vupen.com/english/advisories/2010/2837 Vendor Advisory
http://www.securitytracker.com/id?1024651
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706
http://secunia.com/advisories/42043 Vendor Advisory
http://secunia.com/advisories/41965 Vendor Advisory
http://secunia.com/advisories/41761 Vendor Advisory
http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter
http://support.avaya.com/css/P8/documents/100114329
http://www.securitytracker.com/id?1024645
http://www.ubuntu.com/usn/usn-1011-1
http://secunia.com/advisories/41975 Vendor Advisory
http://www.securityfocus.com/bid/44425
http://secunia.com/advisories/42003 Vendor Advisory
http://support.avaya.com/css/P8/documents/100114335
http://www.redhat.com/support/errata/RHSA-2010-0896.html
http://www.redhat.com/support/errata/RHSA-2010-0861.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
http://secunia.com/advisories/42867 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0061 Vendor Advisory
http://www.exploit-db.com/exploits/15341 Exploit
http://www.exploit-db.com/exploits/15352 Exploit
http://www.exploit-db.com/exploits/15342 Exploit
http://www.ubuntu.com/usn/USN-1011-2
http://www.debian.org/security/2010/dsa-2124
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2010-3765
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765
History
Created Old Value New Value Data Type Notes
2022-05-10 08:33:59 Added to TrackCVE