Lucene search
Ubuntu.comUB:CVE-2010-2755HistoryJul 24, 2010 - 12:00 a.m.
CVE-2010-2755
2010-07-2400:00:00
ubuntu.com
ubuntu.com
14
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.73
Percentile
98.1%
layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly
free memory in the parameter array of a plugin instance, which allows
remote attackers to cause a denial of service (memory corruption) or
possibly execute arbitrary code via a crafted HTML document, related to the
DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability
exists because of an incorrect fix for CVE-2010-1214.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | <ย 3.6.8+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | firefox-3.0 | <ย 3.6.8+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | firefox-3.0 | <ย 3.6.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | firefox-3.5 | <ย 3.6.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | xulrunner-1.9.2 | <ย 1.9.2.8+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | xulrunner-1.9.2 | <ย 1.9.2.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | xulrunner-1.9.2 | <ย 1.9.2.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | xulrunner-1.9.2 | <ย 1.9.2.8+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
References
Related
cve
cve
CVE-2010-2755
2010-07-30 13:26:18
CVE-2010-1214
2010-07-30 20:30:01
openvas
openvas
FreeBSD Ports: firefox
2010-08-21 00:00:00
Mandriva Update for firefox MDVSA-2010:147 (firefox)
2010-08-13 00:00:00
FreeBSD Ports: firefox
2010-08-21 00:00:00
cvelist
cvelist
CVE-2010-2755
2010-07-29 18:00:00
CVE-2010-1214
2010-07-30 20:00:00
nessus
nessus
Mandriva Linux Security Advisory : firefox (MDVSA-2010:147)
2010-08-12 00:00:00
Oracle Linux 5 : firefox (ELSA-2010-0556)
2013-07-12 00:00:00
Firefox 3.6.7 Remote Code Execution
2010-07-26 00:00:00
prion
prion
Memory corruption
2010-07-30 13:26:00
Integer overflow
2010-07-30 20:30:00
nvd
nvd
CVE-2010-2755
2010-07-30 13:26:18
CVE-2010-1214
2010-07-30 20:30:01
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Plugin Parameter Array Dangling Pointer (CVE-2010-2755)
2010-08-29 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:45:42
Arbitrary Code Execution
2020-04-10 00:46:26
oraclelinux
oraclelinux
firefox security update
2010-07-26 00:00:00
seamonkey security update
2010-07-26 00:00:00
firefox security update
2010-07-26 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: xulrunner-1.9.2.7-2.fc13
2010-07-27 02:49:48
[SECURITY] Fedora 12 Update: xulrunner-1.9.1.11-2.fc12
2010-07-27 02:45:31
[SECURITY] Fedora 12 Update: gnome-web-photo-0.9-8.fc12
2010-07-23 02:47:25
centos
centos
firefox, xulrunner security update
2010-07-27 09:39:16
firefox security update
2010-08-06 23:21:00
seamonkey security update
2010-07-27 14:23:17
freebsd
freebsd
firefox -- Dangling pointer crash regression from plugin parameter array fix
2010-07-20 00:00:00
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-48
2010-07-24 00:00:00
ZDI-10-132: Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Vulnerability
2010-07-24 00:00:00
Mozilla Foundation Security Advisory 2010-37
2010-07-24 00:00:00
redhat
redhat
(RHSA-2010:0556) Critical: firefox security update
2010-07-23 00:00:00
(RHSA-2010:0558) Critical: firefox security update
2010-07-23 00:00:00
(RHSA-2010:0557) Critical: seamonkey security update
2010-07-23 00:00:00
seebug
seebug
Firefox Plugin Parameter EnsureCachedAttrParamArrays - Remote Code Execution
2014-07-01 00:00:00
Mozilla Firefox 3.6.7 ๆไปถๅๆฐๅผ็จๆฌๅๆ้ๆผๆด
2010-07-27 00:00:00
exploitpack
exploitpack
mozilla
mozilla
ubuntucve
ubuntucve
CVE-2010-1214
2010-07-23 00:00:00
zdt
zdt
Firefox Plugin Parameter EnsureCachedAttrParamArrays Code Execution
2010-09-18 00:00:00
exploitdb
exploitdb
zdi
zdi
packetstorm
packetstorm
Month Of Abysssec Undisclosed Bugs - Firefox Plugin Parameter
2010-09-18 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
Firefox and Xulrunner vulnerability
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2010-07-30 13:10:04
debian
debian
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:37
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:33
[Backports-security-announce] Security Update for xulrunner
2010-07-21 09:30:16
osv
osv
xulrunner - several vulnerabilities
2010-07-27 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.73
Percentile
98.1%
Related for UB:CVE-2010-2755