PT-2010-2921 · Mozilla+1 · Firefox+2

J23

·

Published

2010-07-20

·

Updated

2024-12-12

·

CVE-2010-1214

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.5.x through 3.5.10 Mozilla Firefox versions 3.6.x through 3.6.6 SeaMonkey versions prior to 2.0.6
Description The issue allows remote attackers to execute arbitrary code via plugin content with many parameter elements. This is due to an integer overflow.
Recommendations For Mozilla Firefox versions 3.5.x through 3.5.10, update to version 3.5.11 or later. For Mozilla Firefox versions 3.6.x through 3.6.6, update to version 3.6.7 or later. For SeaMonkey versions prior to 2.0.6, update to version 2.0.6 or later.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2010-1214
DSA-2075-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
RHSA-2010:0544
RHSA-2010:0545
RHSA-2010:0546
RHSA-2010:0547
RHSA-2010_0544
RHSA-2010_0545
RHSA-2010_0546
RHSA-2010_0547
ZDI-10-132

Affected Products

Firefox
Red Hat
Seamonkey