PT-2010-2749 · Mozilla · Firefox

Publicado 2010-03-19 · Atualizado 2024-12-12 · CVE-2010-1028

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.6 through 3.6.1 Mozilla Firefox versions 3.7 alpha 1 through 3.7 alpha 2

Description The issue is related to an integer overflow in the decompression functionality of the Web Open Fonts Format (WOFF) decoder. This allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow.

Recommendations For Mozilla Firefox versions 3.6 through 3.6.1, update to version 3.6.2 or later. For Mozilla Firefox versions 3.7 alpha 1 through 3.7 alpha 2, update to version 3.7 alpha 3 or later.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-1028

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

ZDI-10-064

Produtos afetados

Firefox

Referências · 2073

• https://suse.com/security/cve/CVE-2012-4192 · Nota
• https://suse.com/security/cve/CVE-2019-9798 · Nota
• https://suse.com/security/cve/CVE-2020-16044 · Nota
• https://suse.com/security/cve/CVE-2024-10467 · Nota
• https://suse.com/security/cve/CVE-2023-25743 · Nota
• https://suse.com/security/cve/CVE-2016-2821 · Nota
• https://suse.com/security/cve/CVE-2017-7837 · Nota
• https://suse.com/security/cve/CVE-2023-4585 · Nota
• https://suse.com/security/cve/CVE-2020-15999 · Nota
• https://suse.com/security/cve/CVE-2013-0768 · Nota
• http://secunia.com/community/forum/thread/show/3592 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-1694 · Nota
• https://suse.com/security/cve/CVE-2015-7174 · Nota
• https://suse.com/security/cve/CVE-2018-12395 · Nota
• https://suse.com/security/cve/CVE-2018-18504 · Nota