PT-2010-1991 · Mozilla+1 · Firefox+2

Bsterne

·

Publicado

2010-03-30

·

Atualizado

2024-12-12

·

CVE-2010-0177

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.19 Mozilla Firefox versions 3.5.x prior to 3.5.9 Mozilla Firefox versions 3.6.x prior to 3.6.2 SeaMonkey versions prior to 2.0.4
Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors, related to a dangling pointer vulnerability in the window.navigator.plugins array.
Recommendations For Mozilla Firefox versions prior to 3.0.19, update to version 3.0.19 or later. For Mozilla Firefox versions 3.5.x prior to 3.5.9, update to version 3.5.9 or later. For Mozilla Firefox versions 3.6.x prior to 3.6.2, update to version 3.6.2 or later. For SeaMonkey versions prior to 2.0.4, update to version 2.0.4 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0177
DSA-2027-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2010:0332
RHSA-2010:0333
RHSA-2010:0544
RHSA-2010:0545
RHSA-2010_0332
RHSA-2010_0333
RHSA-2010_0544
RHSA-2010_0545
ZDI-10-049

Produtos afetados

Firefox
Red Hat
Seamonkey