csaf_redhat - rhsa-2010

rhsa-2010_0500

Vulnerability from csaf_redhat

Published

2010-06-22 21:57

Modified

2024-11-22 03:33

Summary

Red Hat Security Advisory: firefox security, bug fix, and enhancement update

Notes

Topic

An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2010-1121, CVE-2010-1200, CVE-2010-1202, CVE-2010-1203) A flaw was found in the way browser plug-ins interact. It was possible for a plug-in to reference the freed memory from a different plug-in, resulting in the execution of arbitrary code with the privileges of the user running Firefox. (CVE-2010-1198) Several integer overflow flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2010-1196, CVE-2010-1199) A focus stealing flaw was found in the way Firefox handled focus changes. A malicious website could use this flaw to steal sensitive data from a user, such as usernames and passwords. (CVE-2010-1125) A flaw was found in the way Firefox handled the "Content-Disposition: attachment" HTTP header when the "Content-Type: multipart" HTTP header was also present. A website that allows arbitrary uploads and relies on the "Content-Disposition: attachment" HTTP header to prevent content from being displayed inline, could be used by an attacker to serve malicious content to users. (CVE-2010-1197) A flaw was found in the Firefox Math.random() function. This function could be used to identify a browsing session and track a user across different websites. (CVE-2008-5913) A flaw was found in the Firefox XML document loading security checks. Certain security checks were not being called when an XML document was loaded. This could possibly be leveraged later by an attacker to load certain resources that violate the security policies of the browser or its add-ons. Note that this issue cannot be exploited by only loading an XML document. (CVE-2010-0182) For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.6.4. You can find a link to the Mozilla advisories in the References section of this erratum. This erratum upgrades Firefox from version 3.0.19 to version 3.6.4, and as such, contains multiple bug fixes and numerous enhancements. Space precludes documenting these changes in this advisory. For details concerning these changes, refer to the Firefox Release Notes links in the References section of this erratum. Important: Firefox 3.6.4 is not completely backwards-compatible with all Mozilla Add-ons and Firefox plug-ins that worked with Firefox 3.0.19. Firefox 3.6 checks compatibility on first-launch, and, depending on the individual configuration and the installed Add-ons and plug-ins, may disable said Add-ons and plug-ins, or attempt to check for updates and upgrade them. Add-ons and plug-ins may have to be manually updated. All Firefox users should upgrade to this updated package, which contains Firefox version 3.6.4. After installing the update, Firefox must be restarted for the changes to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated firefox package that addresses security issues, fixes bugs, adds\nnumerous enhancements, and upgrades Firefox to version 3.6.4, is now\navailable for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Firefox is an open source web browser.\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2010-1121, CVE-2010-1200, CVE-2010-1202, CVE-2010-1203)\n\nA flaw was found in the way browser plug-ins interact. It was possible for\na plug-in to reference the freed memory from a different plug-in, resulting\nin the execution of arbitrary code with the privileges of the user running\nFirefox. (CVE-2010-1198)\n\nSeveral integer overflow flaws were found in the processing of malformed\nweb content. A web page containing malicious content could cause Firefox to\ncrash or, potentially, execute arbitrary code with the privileges of the\nuser running Firefox. (CVE-2010-1196, CVE-2010-1199)\n\nA focus stealing flaw was found in the way Firefox handled focus changes. A\nmalicious website could use this flaw to steal sensitive data from a user,\nsuch as usernames and passwords. (CVE-2010-1125)\n\nA flaw was found in the way Firefox handled the \"Content-Disposition:\nattachment\" HTTP header when the \"Content-Type: multipart\" HTTP header was\nalso present. A website that allows arbitrary uploads and relies on the\n\"Content-Disposition: attachment\" HTTP header to prevent content from being\ndisplayed inline, could be used by an attacker to serve malicious content\nto users. (CVE-2010-1197)\n\nA flaw was found in the Firefox Math.random() function. This function could\nbe used to identify a browsing session and track a user across different\nwebsites. (CVE-2008-5913)\n\nA flaw was found in the Firefox XML document loading security checks.\nCertain security checks were not being called when an XML document was\nloaded. This could possibly be leveraged later by an attacker to load\ncertain resources that violate the security policies of the browser or its\nadd-ons. Note that this issue cannot be exploited by only loading an XML\ndocument. (CVE-2010-0182)\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Firefox 3.6.4. You can find a link to the Mozilla advisories\nin the References section of this erratum.\n\nThis erratum upgrades Firefox from version 3.0.19 to version 3.6.4, and as\nsuch, contains multiple bug fixes and numerous enhancements. Space\nprecludes documenting these changes in this advisory. For details\nconcerning these changes, refer to the Firefox Release Notes links in the\nReferences section of this erratum.\n\nImportant: Firefox 3.6.4 is not completely backwards-compatible with all\nMozilla Add-ons and Firefox plug-ins that worked with Firefox 3.0.19.\nFirefox 3.6 checks compatibility on first-launch, and, depending on the\nindividual configuration and the installed Add-ons and plug-ins, may\ndisable said Add-ons and plug-ins, or attempt to check for updates and\nupgrade them. Add-ons and plug-ins may have to be manually updated.\n\nAll Firefox users should upgrade to this updated package, which contains\nFirefox version 3.6.4. After installing the update, Firefox must be\nrestarted for the changes to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0500",
        "url": "https://access.redhat.com/errata/RHSA-2010:0500"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://mozilla.com/en-US/firefox/3.6.4/releasenotes/",
        "url": "http://mozilla.com/en-US/firefox/3.6.4/releasenotes/"
      },
      {
        "category": "external",
        "summary": "http://mozilla.com/en-US/firefox/3.6/releasenotes/",
        "url": "http://mozilla.com/en-US/firefox/3.6/releasenotes/"
      },
      {
        "category": "external",
        "summary": "http://mozilla.org/security/known-vulnerabilities/firefox35.html",
        "url": "http://mozilla.org/security/known-vulnerabilities/firefox35.html"
      },
      {
        "category": "external",
        "summary": "http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4",
        "url": "http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4"
      },
      {
        "category": "external",
        "summary": "480938",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=480938"
      },
      {
        "category": "external",
        "summary": "577029",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=577029"
      },
      {
        "category": "external",
        "summary": "577584",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=577584"
      },
      {
        "category": "external",
        "summary": "586580",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=586580"
      },
      {
        "category": "external",
        "summary": "590804",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590804"
      },
      {
        "category": "external",
        "summary": "590810",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590810"
      },
      {
        "category": "external",
        "summary": "590816",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590816"
      },
      {
        "category": "external",
        "summary": "590828",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590828"
      },
      {
        "category": "external",
        "summary": "590830",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590830"
      },
      {
        "category": "external",
        "summary": "590833",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590833"
      },
      {
        "category": "external",
        "summary": "590850",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590850"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0500.json"
      }
    ],
    "title": "Red Hat Security Advisory: firefox security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-22T03:33:38+00:00",
      "generator": {
        "date": "2024-11-22T03:33:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2010:0500",
      "initial_release_date": "2010-06-22T21:57:00+00:00",
      "revision_history": [
        {
          "date": "2010-06-22T21:57:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-06-22T18:01:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:33:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
                "product": {
                  "name": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
                  "product_id": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@3.6.4-8.el4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.ia64",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.ia64",
                  "product_id": "firefox-0:3.6.4-8.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
                  "product_id": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@3.6.4-8.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.x86_64",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.x86_64",
                  "product_id": "firefox-0:3.6.4-8.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:3.6.4-8.el4.i386",
                "product": {
                  "name": "firefox-debuginfo-0:3.6.4-8.el4.i386",
                  "product_id": "firefox-debuginfo-0:3.6.4-8.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@3.6.4-8.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.i386",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.i386",
                  "product_id": "firefox-0:3.6.4-8.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.src",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.src",
                  "product_id": "firefox-0:3.6.4-8.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
                "product": {
                  "name": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
                  "product_id": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@3.6.4-8.el4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.ppc",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.ppc",
                  "product_id": "firefox-0:3.6.4-8.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
                  "product_id": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@3.6.4-8.el4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.s390x",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.s390x",
                  "product_id": "firefox-0:3.6.4-8.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:3.6.4-8.el4.s390",
                "product": {
                  "name": "firefox-debuginfo-0:3.6.4-8.el4.s390",
                  "product_id": "firefox-debuginfo-0:3.6.4-8.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@3.6.4-8.el4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:3.6.4-8.el4.s390",
                "product": {
                  "name": "firefox-0:3.6.4-8.el4.s390",
                  "product_id": "firefox-0:3.6.4-8.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@3.6.4-8.el4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.src"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.src"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.src"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.src"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:3.6.4-8.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:3.6.4-8.el4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-5913",
      "discovery_date": "2009-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "480938"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a \"temporary footprint\" and an \"in-session phishing attack.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mozilla: in-session phishing attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5913"
        },
        {
          "category": "external",
          "summary": "RHBZ#480938",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=480938"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5913",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5913"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5913",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5913"
        }
      ],
      "release_date": "2009-01-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "mozilla: in-session phishing attack"
    },
    {
      "cve": "CVE-2009-5017",
      "discovery_date": "2010-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "656287"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox: overlong UTF-8 seqence detection problem",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-5017"
        },
        {
          "category": "external",
          "summary": "RHBZ#656287",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=656287"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-5017",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-5017"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-5017",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-5017"
        }
      ],
      "release_date": "2009-08-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Firefox: overlong UTF-8 seqence detection problem"
    },
    {
      "cve": "CVE-2010-0182",
      "discovery_date": "2010-03-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "586580"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mozilla: XMLDocument:: load() doesn\u0027t check nsIContentPolicy (MFSA 2010-24)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0182"
        },
        {
          "category": "external",
          "summary": "RHBZ#586580",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=586580"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0182"
        }
      ],
      "release_date": "2010-03-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mozilla: XMLDocument:: load() doesn\u0027t check nsIContentPolicy (MFSA 2010-24)"
    },
    {
      "cve": "CVE-2010-1121",
      "discovery_date": "2010-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "577029"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: arbitrary code execution via memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1121"
        },
        {
          "category": "external",
          "summary": "RHBZ#577029",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=577029"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1121"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "firefox: arbitrary code execution via memory corruption"
    },
    {
      "cve": "CVE-2010-1125",
      "discovery_date": "2010-03-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "577584"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: keystrokes sent to hidden frame rather than visible frame due to javascript flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1125"
        },
        {
          "category": "external",
          "summary": "RHBZ#577584",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=577584"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1125",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1125"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1125",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1125"
        }
      ],
      "release_date": "2010-03-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "firefox: keystrokes sent to hidden frame rather than visible frame due to javascript flaw"
    },
    {
      "cve": "CVE-2010-1196",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nsGenericDOMDataNode:: SetTextInternal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1196"
        },
        {
          "category": "external",
          "summary": "RHBZ#590830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1196"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "nsGenericDOMDataNode:: SetTextInternal"
    },
    {
      "cve": "CVE-2010-1197",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590850"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both \"Content-Disposition: attachment\" and \"Content-Type: multipart\" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Content-Disposition: attachment ignored if Content-Type: multipart also present",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1197"
        },
        {
          "category": "external",
          "summary": "RHBZ#590850",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590850"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1197"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Content-Disposition: attachment ignored if Content-Type: multipart also present"
    },
    {
      "cve": "CVE-2010-1198",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590828"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Freed object reuse across plugin instances",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1198"
        },
        {
          "category": "external",
          "summary": "RHBZ#590828",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590828"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1198",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1198"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1198",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1198"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Freed object reuse across plugin instances"
    },
    {
      "cve": "CVE-2010-1199",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Integer Overflow in XSLT Node Sorting",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1199"
        },
        {
          "category": "external",
          "summary": "RHBZ#590833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1199"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Integer Overflow in XSLT Node Sorting"
    },
    {
      "cve": "CVE-2010-1200",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590804"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1200"
        },
        {
          "category": "external",
          "summary": "RHBZ#590804",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590804"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1200",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1200"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1200",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1200"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Crashes with evidence of memory corruption"
    },
    {
      "cve": "CVE-2010-1202",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590810"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1202"
        },
        {
          "category": "external",
          "summary": "RHBZ#590810",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590810"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1202",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1202"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1202",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1202"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Crashes with evidence of memory corruption"
    },
    {
      "cve": "CVE-2010-1203",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590816"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:firefox-0:3.6.4-8.el4.i386",
          "4AS:firefox-0:3.6.4-8.el4.ia64",
          "4AS:firefox-0:3.6.4-8.el4.ppc",
          "4AS:firefox-0:3.6.4-8.el4.s390",
          "4AS:firefox-0:3.6.4-8.el4.s390x",
          "4AS:firefox-0:3.6.4-8.el4.src",
          "4AS:firefox-0:3.6.4-8.el4.x86_64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-0:3.6.4-8.el4.src",
          "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-0:3.6.4-8.el4.i386",
          "4ES:firefox-0:3.6.4-8.el4.ia64",
          "4ES:firefox-0:3.6.4-8.el4.ppc",
          "4ES:firefox-0:3.6.4-8.el4.s390",
          "4ES:firefox-0:3.6.4-8.el4.s390x",
          "4ES:firefox-0:3.6.4-8.el4.src",
          "4ES:firefox-0:3.6.4-8.el4.x86_64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-0:3.6.4-8.el4.i386",
          "4WS:firefox-0:3.6.4-8.el4.ia64",
          "4WS:firefox-0:3.6.4-8.el4.ppc",
          "4WS:firefox-0:3.6.4-8.el4.s390",
          "4WS:firefox-0:3.6.4-8.el4.s390x",
          "4WS:firefox-0:3.6.4-8.el4.src",
          "4WS:firefox-0:3.6.4-8.el4.x86_64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
          "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1203"
        },
        {
          "category": "external",
          "summary": "RHBZ#590816",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590816"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1203",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1203"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1203",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1203"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-06-22T21:57:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0500"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:firefox-0:3.6.4-8.el4.i386",
            "4AS:firefox-0:3.6.4-8.el4.ia64",
            "4AS:firefox-0:3.6.4-8.el4.ppc",
            "4AS:firefox-0:3.6.4-8.el4.s390",
            "4AS:firefox-0:3.6.4-8.el4.s390x",
            "4AS:firefox-0:3.6.4-8.el4.src",
            "4AS:firefox-0:3.6.4-8.el4.x86_64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4AS:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-0:3.6.4-8.el4.src",
            "4Desktop:firefox-0:3.6.4-8.el4.x86_64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4Desktop:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-0:3.6.4-8.el4.i386",
            "4ES:firefox-0:3.6.4-8.el4.ia64",
            "4ES:firefox-0:3.6.4-8.el4.ppc",
            "4ES:firefox-0:3.6.4-8.el4.s390",
            "4ES:firefox-0:3.6.4-8.el4.s390x",
            "4ES:firefox-0:3.6.4-8.el4.src",
            "4ES:firefox-0:3.6.4-8.el4.x86_64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4ES:firefox-debuginfo-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-0:3.6.4-8.el4.i386",
            "4WS:firefox-0:3.6.4-8.el4.ia64",
            "4WS:firefox-0:3.6.4-8.el4.ppc",
            "4WS:firefox-0:3.6.4-8.el4.s390",
            "4WS:firefox-0:3.6.4-8.el4.s390x",
            "4WS:firefox-0:3.6.4-8.el4.src",
            "4WS:firefox-0:3.6.4-8.el4.x86_64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.i386",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ia64",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.ppc",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.s390x",
            "4WS:firefox-debuginfo-0:3.6.4-8.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Crashes with evidence of memory corruption"
    }
  ]
}

cve-2010-1200

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=553938	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=484890	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=551233	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=551661	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59659	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/41090	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=534768	x_refsource_CONFIRM
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=509839	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-26.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=531176	x_refsource_CONFIRM
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "firefox-seamonkey-browser-code-exec(59659)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59659"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "oval:org.mitre.oval:def:14326",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326"
          },
          {
            "name": "41090",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41090"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839"
          },
          {
            "name": "oval:org.mitre.oval:def:10816",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "firefox-seamonkey-browser-code-exec(59659)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59659"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "oval:org.mitre.oval:def:14326",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326"
        },
        {
          "name": "41090",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41090"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839"
        },
        {
          "name": "oval:org.mitre.oval:def:10816",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1200",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "firefox-seamonkey-browser-code-exec(59659)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59659"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "oval:org.mitre.oval:def:14326",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326"
            },
            {
              "name": "41090",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41090"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839"
            },
            {
              "name": "oval:org.mitre.oval:def:10816",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1200",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0182

Vulnerability from cvelistv5

Published

2010-04-05 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2010/mfsa2010-24.html	x_refsource_CONFIRM
	http://secunia.com/advisories/39397	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/39479	vdb-entry, x_refsource_BID
	http://ubuntu.com/usn/usn-921-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=490790	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:070	vendor-advisory, x_refsource_MANDRIVA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/57396	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/0748	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0849	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375	vdb-entry, signature, x_refsource_OVAL
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.236Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-24.html"
          },
          {
            "name": "39397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39397"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "39479",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/39479"
          },
          {
            "name": "USN-921-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-921-1"
          },
          {
            "name": "oval:org.mitre.oval:def:7618",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=490790"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "MDVSA-2010:070",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
          },
          {
            "name": "firefox-xmldocumentload-weak-security(57396)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57396"
          },
          {
            "name": "ADV-2010-0748",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0748"
          },
          {
            "name": "ADV-2010-0849",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0849"
          },
          {
            "name": "oval:org.mitre.oval:def:9375",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-24.html"
        },
        {
          "name": "39397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39397"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "39479",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/39479"
        },
        {
          "name": "USN-921-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-921-1"
        },
        {
          "name": "oval:org.mitre.oval:def:7618",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=490790"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "MDVSA-2010:070",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
        },
        {
          "name": "firefox-xmldocumentload-weak-security(57396)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57396"
        },
        {
          "name": "ADV-2010-0748",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0748"
        },
        {
          "name": "ADV-2010-0849",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0849"
        },
        {
          "name": "oval:org.mitre.oval:def:9375",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0182",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-24.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-24.html"
            },
            {
              "name": "39397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39397"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "39479",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/39479"
            },
            {
              "name": "USN-921-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-921-1"
            },
            {
              "name": "oval:org.mitre.oval:def:7618",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=490790",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=490790"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "MDVSA-2010:070",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
            },
            {
              "name": "firefox-xmldocumentload-weak-security(57396)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57396"
            },
            {
              "name": "ADV-2010-0748",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0748"
            },
            {
              "name": "ADV-2010-0849",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0849"
            },
            {
              "name": "oval:org.mitre.oval:def:9375",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0182",
    "datePublished": "2010-04-05T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.236Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-5017

Vulnerability from cvelistv5

Published

2010-11-12 21:00

Modified

2024-09-16 17:44

Severity ?

Summary

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=511859	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=522634	x_refsource_CONFIRM
	http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html	x_refsource_MISC
	http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T07:24:53.995Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511859"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522634"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-11-12T21:00:00Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511859"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522634"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-5017",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=511859",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511859"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=522634",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522634"
            },
            {
              "name": "http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html",
              "refsource": "MISC",
              "url": "http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html"
            },
            {
              "name": "http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0",
              "refsource": "CONFIRM",
              "url": "http://hg.mozilla.org/releases/mozilla-1.9.2/rev/e42c563313a0"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-5017",
    "datePublished": "2010-11-12T21:00:00Z",
    "dateReserved": "2010-11-12T00:00:00Z",
    "dateUpdated": "2024-09-16T17:44:04.707Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1203

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10401	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=557946	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/41099	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59662	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8317	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-26.html	x_refsource_CONFIRM
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=546611	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "name": "oval:org.mitre.oval:def:10401",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10401"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=557946"
          },
          {
            "name": "41099",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41099"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "mozilla-firefox-javascript-ce(59662)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59662"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "name": "oval:org.mitre.oval:def:8317",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8317"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=546611"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "name": "oval:org.mitre.oval:def:10401",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10401"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=557946"
        },
        {
          "name": "41099",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41099"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "mozilla-firefox-javascript-ce(59662)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59662"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "name": "oval:org.mitre.oval:def:8317",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8317"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=546611"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1203",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "oval:org.mitre.oval:def:10401",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10401"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=557946",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=557946"
            },
            {
              "name": "41099",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41099"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "mozilla-firefox-javascript-ce(59662)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59662"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "oval:org.mitre.oval:def:8317",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8317"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=546611",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=546611"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1203",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1198

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59664	vdb-entry, x_refsource_XF
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-28.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/41102	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=532246	x_refsource_CONFIRM
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176	vdb-entry, signature, x_refsource_OVAL
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "firefox-plugin-instances-code-exec(59664)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59664"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10990",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990"
          },
          {
            "name": "41102",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41102"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "name": "oval:org.mitre.oval:def:14176",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "firefox-plugin-instances-code-exec(59664)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59664"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10990",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990"
        },
        {
          "name": "41102",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41102"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "name": "oval:org.mitre.oval:def:14176",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1198",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "firefox-plugin-instances-code-exec(59664)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59664"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10990",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990"
            },
            {
              "name": "41102",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41102"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "oval:org.mitre.oval:def:14176",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1198",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5913

Vulnerability from cvelistv5

Published

2009-01-20 16:00

Modified

2024-08-07 11:13

Severity ?

Summary

The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11139	vdb-entry, signature, x_refsource_OVAL
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html	x_refsource_MISC
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161	x_refsource_MISC
	http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html	x_refsource_MISC
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf	x_refsource_MISC
	http://www.mozilla.org/security/announce/2010/mfsa2010-33.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=475585	x_refsource_CONFIRM
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/33276	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T11:13:13.201Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "oval:org.mitre.oval:def:11139",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11139"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-33.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=475585"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "33276",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/33276"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a \"temporary footprint\" and an \"in-session phishing attack.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "oval:org.mitre.oval:def:11139",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11139"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-33.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=475585"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "33276",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/33276"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5913",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a \"temporary footprint\" and an \"in-session phishing attack.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "oval:org.mitre.oval:def:11139",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11139"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html",
              "refsource": "MISC",
              "url": "http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161",
              "refsource": "MISC",
              "url": "http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161"
            },
            {
              "name": "http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html",
              "refsource": "MISC",
              "url": "http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf",
              "refsource": "MISC",
              "url": "http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-33.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-33.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=475585",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=475585"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "33276",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/33276"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5913",
    "datePublished": "2009-01-20T16:00:00",
    "dateReserved": "2009-01-20T00:00:00",
    "dateUpdated": "2024-08-07T11:13:13.201Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1121

Vulnerability from cvelistv5

Published

2010-03-25 20:31

Modified

2024-08-07 01:14

Severity ?

Summary

Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10924	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010	x_refsource_MISC
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id?1023817	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=555109	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://news.cnet.com/8301-27080_3-20001126-245.html	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6844	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	http://twitter.com/thezdi/statuses/11005277222	x_refsource_MISC
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	http://www.mozilla.org/security/announce/2010/mfsa2010-25.html	x_refsource_CONFIRM
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.180Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10924",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10924"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "1023817",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1023817"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=555109"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://news.cnet.com/8301-27080_3-20001126-245.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6844",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6844"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://twitter.com/thezdi/statuses/11005277222"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-25.html"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10924",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10924"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "1023817",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1023817"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=555109"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://news.cnet.com/8301-27080_3-20001126-245.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6844",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6844"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://twitter.com/thezdi/statuses/11005277222"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-25.html"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1121",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10924",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10924"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010",
              "refsource": "MISC",
              "url": "http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "1023817",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1023817"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=555109",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=555109"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "http://news.cnet.com/8301-27080_3-20001126-245.html",
              "refsource": "MISC",
              "url": "http://news.cnet.com/8301-27080_3-20001126-245.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6844",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6844"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "http://twitter.com/thezdi/statuses/11005277222",
              "refsource": "MISC",
              "url": "http://twitter.com/thezdi/statuses/11005277222"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-25.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-25.html"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1121",
    "datePublished": "2010-03-25T20:31:00",
    "dateReserved": "2010-03-25T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1197

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186	vdb-entry, signature, x_refsource_OVAL
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=537120	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/41103	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59667	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-32.html	x_refsource_CONFIRM
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.666Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "oval:org.mitre.oval:def:14186",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "oval:org.mitre.oval:def:10168",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "41103",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41103"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "firefox-contentdisposition-security-bypass(59667)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59667"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both \"Content-Disposition: attachment\" and \"Content-Type: multipart\" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "oval:org.mitre.oval:def:14186",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "oval:org.mitre.oval:def:10168",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "41103",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41103"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "firefox-contentdisposition-security-bypass(59667)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59667"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1197",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both \"Content-Disposition: attachment\" and \"Content-Type: multipart\" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "oval:org.mitre.oval:def:14186",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "oval:org.mitre.oval:def:10168",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "41103",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41103"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "firefox-contentdisposition-security-bypass(59667)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59667"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1197",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1199

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

References

▼	URL	Tags
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59666	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287	vdb-entry, signature, x_refsource_OVAL
	http://www.exploit-db.com/exploits/14949	exploit, x_refsource_EXPLOIT-DB
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=554255	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41082	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/511972/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.zerodayinitiative.com/advisories/ZDI-10-113	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-30.html	x_refsource_CONFIRM
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.668Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "firefox-xslt-node-code-execution(59666)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59666"
          },
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "oval:org.mitre.oval:def:13287",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287"
          },
          {
            "name": "14949",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/14949"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "41082",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41082"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/511972/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-113"
          },
          {
            "name": "oval:org.mitre.oval:def:10885",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "firefox-xslt-node-code-execution(59666)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59666"
        },
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "oval:org.mitre.oval:def:13287",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287"
        },
        {
          "name": "14949",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/14949"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "41082",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41082"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/511972/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-113"
        },
        {
          "name": "oval:org.mitre.oval:def:10885",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1199",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "firefox-xslt-node-code-execution(59666)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59666"
            },
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "oval:org.mitre.oval:def:13287",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287"
            },
            {
              "name": "14949",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/14949"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "41082",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41082"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/511972/100/0/threaded"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-10-113",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-113"
            },
            {
              "name": "oval:org.mitre.oval:def:10885",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1199",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1196

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.mozilla.org/security/announce/2010/mfsa2010-29.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11424	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59665	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=534666	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14017	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/41087	vdb-entry, x_refsource_BID
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.688Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-29.html"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "oval:org.mitre.oval:def:11424",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11424"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "name": "firefox-nsgenericdomdatanode-bo(59665)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59665"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534666"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "name": "oval:org.mitre.oval:def:14017",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14017"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "name": "41087",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41087"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-29.html"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "oval:org.mitre.oval:def:11424",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11424"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "name": "firefox-nsgenericdomdatanode-bo(59665)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59665"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534666"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "name": "oval:org.mitre.oval:def:14017",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14017"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "name": "41087",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41087"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1196",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-29.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-29.html"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "oval:org.mitre.oval:def:11424",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11424"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "firefox-nsgenericdomdatanode-bo(59665)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59665"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=534666",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534666"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "oval:org.mitre.oval:def:14017",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14017"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "41087",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41087"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1196",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.688Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1202

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=561031	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=526449	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=424558	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59661	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10889	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=561592	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/41094	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14308	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2010/mfsa2010-26.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.666Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561031"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526449"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=424558"
          },
          {
            "name": "firefox-javascript-ce(59661)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59661"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "oval:org.mitre.oval:def:10889",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10889"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561592"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "name": "41094",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41094"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "oval:org.mitre.oval:def:14308",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14308"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561031"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526449"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=424558"
        },
        {
          "name": "firefox-javascript-ce(59661)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59661"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "oval:org.mitre.oval:def:10889",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10889"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561592"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "name": "41094",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41094"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "oval:org.mitre.oval:def:14308",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14308"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1202",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=561031",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561031"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=526449",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526449"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=424558",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=424558"
            },
            {
              "name": "firefox-javascript-ce(59661)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59661"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "oval:org.mitre.oval:def:10889",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10889"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=561592",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561592"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "41094",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41094"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "oval:org.mitre.oval:def:14308",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14308"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1202",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1125

Vulnerability from cvelistv5

Published

2010-03-26 20:00

Modified

2024-08-07 01:14

Severity ?

Summary

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=552255	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2010/mfsa2010-31.html	x_refsource_CONFIRM
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10386	vdb-entry, signature, x_refsource_OVAL
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13962	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/510070/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=552255"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-31.html"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "oval:org.mitre.oval:def:10386",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10386"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "oval:org.mitre.oval:def:13962",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13962"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "name": "20100313 ...because you can\u0027t get enough of clickjacking",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/510070/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=552255"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-31.html"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "oval:org.mitre.oval:def:10386",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10386"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "oval:org.mitre.oval:def:13962",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13962"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "name": "20100313 ...because you can\u0027t get enough of clickjacking",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/510070/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1125",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=552255",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=552255"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-31.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-31.html"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "oval:org.mitre.oval:def:10386",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10386"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "oval:org.mitre.oval:def:13962",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13962"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "20100313 ...because you can\u0027t get enough of clickjacking",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/510070/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1125",
    "datePublished": "2010-03-26T20:00:00",
    "dateReserved": "2010-03-26T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature