PT-2010-2917 · Mozilla+1 · Thunderbird+2

O. Andersen · Published 2010-07-21 · Updated 2024-12-12 · CVE-2010-1210

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.7 Thunderbird versions prior to 3.1.1

Description The issue involves the insertion of a U+FFFD sequence into text under certain circumstances, potentially making it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text. This could be exploited by attackers using specially crafted text.

Recommendations For Mozilla Firefox versions prior to 3.6.7, update to version 3.6.7 or later to resolve the issue. For Thunderbird versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-1210

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2010:0547

RHSA-2010_0547

Affected Products

Firefox

Red Hat

Thunderbird

References · 2088

• 🔥 https://github.com/mk219533/CVE-2010-1205 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• http://mozilla.org/security/announce/2010/mfsa2010-44.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09413 · Security Note
• https://bdu.fstec.ru/vul/2015-10121 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1210 · Security Note
• https://suse.com/security/cve/CVE-2023-6856 · Note
• https://suse.com/security/cve/CVE-2024-4778 · Note
• https://suse.com/security/cve/CVE-2019-11751 · Note
• https://suse.com/security/cve/CVE-2017-5441 · Note
• https://suse.com/security/cve/CVE-2023-6861 · Note
• https://suse.com/security/cve/CVE-2015-0817 · Note
• https://suse.com/security/cve/CVE-2021-23965 · Note
• https://suse.com/security/cve/CVE-2016-9899 · Note