PT-2010-2915 · Mozilla+1 · Firefox+2

Regenrecht

·

Published

2010-07-20

·

Updated

2024-12-12

·

CVE-2010-1208

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.5.x through 3.5.10 Mozilla Firefox versions 3.6.x through 3.6.6 SeaMonkey versions prior to 2.0.6
Description A use-after-free issue in the attribute-cloning functionality of the DOM implementation allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.
Recommendations For Mozilla Firefox versions 3.5.x through 3.5.10, update to version 3.5.11 or later. For Mozilla Firefox versions 3.6.x through 3.6.6, update to version 3.6.7 or later. For SeaMonkey versions prior to 2.0.6, update to version 2.0.6 or later.

Exploit

Fix

RCE

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2010-1208
DSA-2075-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2010:0547
RHSA-2010_0547
ZDI-10-134

Affected Products

Firefox
Red Hat
Seamonkey