Lucene search
Ubuntu.comUB:CVE-2010-1199HistoryJun 24, 2010 - 12:00 a.m.
CVE-2010-1199
2010-06-2400:00:00
ubuntu.com
ubuntu.com
28
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.793
Percentile
98.3%
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox
3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and
SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code
via a large text value for a node.
Notes
| Author | Note |
|---|---|
| jdstrand | CVEs in Firefox are tracked in the xulrunner source packages. The mapping of xulrunner sources to firefox is: xulrunner (1.8.0): firefox (1.5) - Ubuntu 6.06 LTS xulrunner (1.8.1): firefox (2.0) - Ubuntu 6.10 - 8.04 LTS xulrunner-1.9: firefox-3.0 xulrunner-1.9.1: firefox-3.5 Ubuntu 6.06 LTS and 10.04 LTS uses the embedded xulrunner and not the system xulrunner-1.9.2, so it is tracked in the firefox source package. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 3.6.6+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | firefox | < 3.6.7+build2+nobinonly-0ubuntu1 | UNKNOWN |
| ubuntu | 11.04 | noarch | firefox | < 3.6.7+build2+nobinonly-0ubuntu1 | UNKNOWN |
| ubuntu | 11.10 | noarch | firefox | < 3.6.7+build2+nobinonly-0ubuntu1 | UNKNOWN |
| ubuntu | 8.04 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | < 2.0.6+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | seamonkey | < 2.0.6+build1+nobinonly-0ubuntu1 | UNKNOWN |
| ubuntu | 11.04 | noarch | seamonkey | < 2.0.6+build1+nobinonly-0ubuntu1 | UNKNOWN |
Related
packetstorm
packetstorm
Month Of Abysssec Undisclosed Bugs - Firefox XSLT Sort Code Execution
2010-09-11 00:00:00
seebug
seebug
Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
2010-06-24 00:00:00
exploitdb
exploitdb
Mozilla Firefox 3.6.3 - XSLT Sort Remote Code Execution
2010-09-09 00:00:00
Mozilla Firefox/Thunderbird/SeaMonkey - XSLT Integer Overflow
2010-06-22 00:00:00
cvelist
cvelist
CVE-2010-1199
2010-06-23 18:00:00
exploitpack
exploitpack
Mozilla Firefox 3.6.3 - XSLT Sort Remote Code Execution
2010-09-09 00:00:00
prion
prion
Integer overflow
2010-06-24 12:30:00
nvd
nvd
CVE-2010-1199
2010-06-24 12:30:01
cve
cve
CVE-2010-1199
2010-06-24 12:30:01
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:43:50
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-30
2010-06-25 00:00:00
ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
2010-06-25 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2010-06-25 00:00:00
zdi
zdi
Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
2010-06-23 00:00:00
mozilla
mozilla
Integer Overflow in XSLT Node Sorting — Mozilla
2010-06-22 00:00:00
zdt
zdt
Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
2010-09-09 00:00:00
nessus
nessus
Mozilla Thunderbird < 3.0.5 Multiple Vulnerabilities
2010-06-23 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:126)
2010-06-25 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities (Jun 2010) - Windows
2010-07-01 00:00:00
Mozilla Products Multiple Vulnerabilities june-10 (Windows)
2010-07-01 00:00:00
Mandriva Update for totem MDVA-2010:126 (totem)
2010-04-29 00:00:00
redhat
redhat
(RHSA-2010:0499) Critical: seamonkey security update
2010-06-22 00:00:00
(RHSA-2010:0501) Critical: firefox security, bug fix, and enhancement update
2010-06-22 00:00:00
(RHSA-2010:0500) Critical: firefox security, bug fix, and enhancement update
2010-06-22 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2010-06-22 00:00:00
firefox security, bug fix, and enhancement update
2010-06-23 00:00:00
firefox security, bug fix, and enhancement update
2010-06-23 00:00:00
centos
centos
seamonkey security update
2010-07-21 19:15:00
devhelp, esc, firefox, gnome, totem, xulrunner, yelp security update
2010-06-24 16:14:16
thunderbird security update
2010-08-06 23:32:55
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-06 00:00:00
apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update
2010-06-29 00:00:00
Firefox and Xulrunner vulnerabilities
2010-06-29 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-06-27 00:00:00
debian
debian
[SECURITY] [DSA 2064-1] New xulrunner packages fix several vulnerabilities
2010-06-27 20:39:12
[Backports-security-announce] Security Update for xulrunner
2010-07-01 11:54:27
[Backports-security-announce] Security Update for xulrunner
2010-07-01 11:48:42
fedora
fedora
[SECURITY] Fedora 13 Update: firefox-3.6.4-1.fc13
2010-06-24 16:31:49
[SECURITY] Fedora 13 Update: galeon-2.0.7-29.fc13
2010-06-24 16:31:49
[SECURITY] Fedora 13 Update: gnome-web-photo-0.9-9.fc13
2010-06-24 16:31:49
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-06-22 00:00:00
suse
suse
remote code execution in MozillaFirefox,mozilla-xulrunner191
2010-07-09 14:53:59
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.793
Percentile
98.3%
Related for UB:CVE-2010-1199