Lucene search
HistoryJul 30, 2010 - 8:30 p.m.
CVE-2010-1209
cve-2010-1209
mozilla firefox
nodeiterator
vulnerability
remote code execution
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
9.2
Confidence
High
EPSS
0.083
Percentile
94.4%
Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.
Affected configurations
Node
mozillafirefoxMatch3.5.1
ORmozillafirefoxMatch3.5.2
ORmozillafirefoxMatch3.5.3
ORmozillafirefoxMatch3.5.4
ORmozillafirefoxMatch3.5.5
ORmozillafirefoxMatch3.5.6
ORmozillafirefoxMatch3.5.7
ORmozillafirefoxMatch3.5.9
ORmozillafirefoxMatch3.5.10
ORmozillafirefoxMatch3.6.1
ORmozillafirefoxMatch3.6.2
ORmozillafirefoxMatch3.6.3
ORmozillafirefoxMatch3.6.4
ORmozillafirefoxMatch3.6.6
Node
mozillaseamonkeyRange≤2.0.5
ORmozillaseamonkeyMatch1.0
ORmozillaseamonkeyMatch1.0alpha
ORmozillaseamonkeyMatch1.0beta
ORmozillaseamonkeyMatch1.0.1
ORmozillaseamonkeyMatch1.0.2
ORmozillaseamonkeyMatch1.0.3
ORmozillaseamonkeyMatch1.0.4
ORmozillaseamonkeyMatch1.0.5
ORmozillaseamonkeyMatch1.0.6
ORmozillaseamonkeyMatch1.0.7
ORmozillaseamonkeyMatch1.0.8
ORmozillaseamonkeyMatch1.0.9
ORmozillaseamonkeyMatch1.1
ORmozillaseamonkeyMatch1.1alpha
ORmozillaseamonkeyMatch1.1beta
ORmozillaseamonkeyMatch1.1.1
ORmozillaseamonkeyMatch1.1.2
ORmozillaseamonkeyMatch1.1.3
ORmozillaseamonkeyMatch1.1.4
ORmozillaseamonkeyMatch1.1.5
ORmozillaseamonkeyMatch1.1.6
ORmozillaseamonkeyMatch1.1.7
ORmozillaseamonkeyMatch1.1.8
ORmozillaseamonkeyMatch1.1.9
ORmozillaseamonkeyMatch1.1.10
ORmozillaseamonkeyMatch1.1.11
ORmozillaseamonkeyMatch1.1.12
ORmozillaseamonkeyMatch1.1.13
ORmozillaseamonkeyMatch1.1.14
ORmozillaseamonkeyMatch1.1.15
ORmozillaseamonkeyMatch1.1.16
ORmozillaseamonkeyMatch1.1.17
ORmozillaseamonkeyMatch1.1.18
ORmozillaseamonkeyMatch1.1.19
ORmozillaseamonkeyMatch1.5.0.8
ORmozillaseamonkeyMatch1.5.0.9
ORmozillaseamonkeyMatch1.5.0.10
ORmozillaseamonkeyMatch2.0
ORmozillaseamonkeyMatch2.0alpha_1
ORmozillaseamonkeyMatch2.0alpha_2
ORmozillaseamonkeyMatch2.0alpha_3
ORmozillaseamonkeyMatch2.0beta_1
ORmozillaseamonkeyMatch2.0beta_2
ORmozillaseamonkeyMatch2.0rc1
ORmozillaseamonkeyMatch2.0rc2
ORmozillaseamonkeyMatch2.0.1
ORmozillaseamonkeyMatch2.0.2
ORmozillaseamonkeyMatch2.0.3
ORmozillaseamonkeyMatch2.0.4
ORmozillaseamonkeyMatch2.0a1pre
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | 3.5.1 | cpe:/a:mozilla:firefox:3.5.1::: |
| mozilla | firefox | 3.5.6 | cpe:/a:mozilla:firefox:3.5.6::: |
| mozilla | firefox | 3.6.3 | cpe:/a:mozilla:firefox:3.6.3::: |
| mozilla | firefox | 3.5.9 | cpe:/a:mozilla:firefox:3.5.9::: |
| mozilla | firefox | 3.5.7 | cpe:/a:mozilla:firefox:3.5.7::: |
| mozilla | firefox | 3.5.5 | cpe:/a:mozilla:firefox:3.5.5::: |
| mozilla | firefox | 3.6.4 | cpe:/a:mozilla:firefox:3.6.4::: |
| mozilla | firefox | 3.6.6 | cpe:/a:mozilla:firefox:3.6.6::: |
| mozilla | firefox | 3.6.1 | cpe:/a:mozilla:firefox:3.6.1::: |
| mozilla | firefox | 3.5.4 | cpe:/a:mozilla:firefox:3.5.4::: |
References
Related
nvd
nvd
CVE-2010-1209
2010-07-30 20:30:01
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-36
2010-07-24 00:00:00
ZDI-10-130: Mozilla Firefox NodeIterator Remote Code Execution Vulnerability
2010-07-24 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2010-07-24 00:00:00
zdi
zdi
Mozilla Firefox NodeIterator Remote Code Execution Vulnerability
2010-07-20 00:00:00
ubuntucve
ubuntucve
CVE-2010-1209
2010-07-23 00:00:00
prion
prion
Design/Logic Flaw
2010-07-30 20:30:00
mozilla
mozilla
Use-after-free error in NodeIterator — Mozilla
2010-07-20 00:00:00
cvelist
cvelist
CVE-2010-1209
2010-07-30 20:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:46:06
openvas
openvas
Mozilla Products Multiple Vulnerabilitie july-10 (Windows)
2010-07-26 00:00:00
Mozilla Products Multiple Vulnerabilities (MFSA2010-35, MFSA2010-36, MFSA2010-37, MFSA2010-43, MFSA2010-45) - Windows
2010-07-26 00:00:00
Fedora Update for seamonkey FEDORA-2010-11363
2010-07-23 00:00:00
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
nessus
nessus
fedora
fedora
[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-8.fc12
2010-07-23 02:47:25
[SECURITY] Fedora 12 Update: seamonkey-2.0.6-1.fc12
2010-07-23 02:43:20
[SECURITY] Fedora 12 Update: gnome-python2-extras-2.25.3-19.fc12
2010-07-23 02:47:25
centos
centos
firefox, xulrunner security update
2010-07-22 15:29:05
redhat
redhat
(RHSA-2010:0547) Critical: firefox security update
2010-07-20 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
oraclelinux
oraclelinux
firefox security update
2010-07-21 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
9.2
Confidence
High
EPSS
0.083
Percentile
94.4%
Related for CVE-2010-1209