Lucene search
HistoryMay 20, 2010 - 5:30 p.m.
CVE-2010-1988
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.151
Percentile
95.9%
Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via JavaScript code that performs certain string concatenation and substring operations, a different vulnerability than CVE-2009-1571.
Affected configurations
Node
mozillafirefoxMatch3.6.3
microsoftwindows_xpsp3
References
Related
cvelist
cvelist
prion
prion
Null pointer dereference
2010-05-20 17:30:00
Design/Logic Flaw
2010-02-22 13:00:00
Design/Logic Flaw
2010-05-20 17:30:00
cve
cve
ubuntucve
ubuntucve
CVE-2009-1571
2010-02-17 00:00:00
nvd
nvd
mozilla
mozilla
Use-after-free crash in HTML parser β Mozilla
2010-02-17 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:051)
2010-03-02 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:42:20
zdt
zdt
Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities
2010-05-21 00:00:00
openvas
openvas
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
2010-02-15 00:00:00
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
2010-02-15 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:051 (mozilla-thunderbird)
2010-03-12 00:00:00
seebug
seebug
Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities
2010-05-25 00:00:00
Mozilla Firefox 3.6.3 USP10.dllεxul.dllεΊε€δΈͺζη»ζε‘ζΌζ΄
2010-05-24 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-03
2010-02-19 00:00:00
Secunia Research: Mozilla Firefox Memory Corruption Vulnerability
2010-02-19 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-02-25 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: sunbird-1.0-0.19.20090916hg.fc12
2010-03-02 00:56:32
[SECURITY] Fedora 11 Update: thunderbird-3.0.2-1.fc11
2010-03-02 01:02:35
[SECURITY] Fedora 11 Update: sunbird-1.0-0.14.20090715hg.fc11
2010-03-02 01:02:35
redhat
redhat
(RHSA-2010:0113) Critical: seamonkey security update
2010-02-17 00:00:00
centos
centos
seamonkey security update
2010-02-18 00:29:51
oraclelinux
oraclelinux
seamonkey security update
2010-02-17 00:00:00
firefox security update
2010-02-17 00:00:00
ubuntu
ubuntu
Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
2010-02-17 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2010-02-17 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-02-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-02-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey
2010-03-04 16:53:48
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:02:49
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
2010-02-18 20:04:53
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:11:52
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.151
Percentile
95.9%
Related for NVD:CVE-2010-1988