Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2010-3768
HistoryDec 09, 2010 - 12:00 a.m.

CVE-2010-3768

2010-12-0900:00:00
ubuntu.com
ubuntu.com
29

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.174

Percentile

96.1%

JSON

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before
3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly
validate downloadable fonts before use within an operating system’s font
implementation, which allows remote attackers to execute arbitrary code via
vectors related to @font-face Cascading Style Sheets (CSS) rules.

Notes

Author Note
jdstrand Ubuntu 11.04 (Natty Narwhal) has 4.0b7. Fixes will be in 4.0b8.
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 3.6.13+build3+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchfirefox< 3.6.13+build3+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu8.04noarchfirefox-3.0< 3.6.13+build3+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu9.10noarchfirefox-3.5< 3.6.13+build3+nobinonly-0ubuntu0.9.10.1UNKNOWN
ubuntu8.04noarchseamonkey< 2.0.11+build1+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu9.10noarchseamonkey< 2.0.11+build1+nobinonly-0ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchseamonkey< 2.0.11+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchseamonkey< 2.0.11+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9.2< 1.9.2.13+build3+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu9.10noarchxulrunner-1.9.2< 1.9.2.13+build3+nobinonly-0ubuntu0.9.10.1UNKNOWN
Rows per page:
1-10 of 121

Related

securityvulns 2
mozilla 1
cve 1
nvd 1
prion 1
cvelist 1
veracode 1
openvas 60
redhat 2
nessus 38
oraclelinux 2
fedora 16
ubuntu 2
centos 1
debian 1
freebsd 1
suse 2
gentoo 1
osv 1
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-78
2010-12-10 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2010-12-10 00:00:00
mozilla
mozilla
Add support for OTS font sanitizer — Mozilla
2010-12-09 00:00:00
cve
cve
CVE-2010-3768
2010-12-10 19:00:02
nvd
nvd
CVE-2010-3768
2010-12-10 19:00:02
prion
prion
Code injection
2010-12-10 19:00:00
cvelist
cvelist
CVE-2010-3768
2010-12-10 18:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:52:29
openvas
openvas
Fedora Update for thunderbird FEDORA-2010-18778
2010-12-28 00:00:00
Fedora Update for thunderbird FEDORA-2010-18778
2010-12-28 00:00:00
Fedora Update for thunderbird FEDORA-2010-18777
2010-12-28 00:00:00
redhat
redhat
(RHSA-2010:0969) Moderate: thunderbird security update
2010-12-09 00:00:00
(RHSA-2010:0966) Critical: firefox security update
2010-12-09 00:00:00
nessus
nessus
Oracle Linux 6 : thunderbird (ELSA-2010-0969)
2013-07-12 00:00:00
Fedora 13 : thunderbird-3.1.7-2.fc13 (2010-18778)
2010-12-14 00:00:00
Fedora 14 : thunderbird-3.1.7-2.fc14 (2010-18777)
2010-12-13 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2011-02-10 00:00:00
firefox security update
2010-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: thunderbird-3.1.7-2.fc14
2010-12-12 00:05:37
[SECURITY] Fedora 13 Update: thunderbird-3.1.7-2.fc13
2010-12-13 20:10:19
[SECURITY] Fedora 13 Update: firefox-3.6.13-1.fc13
2010-12-10 20:25:42
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-12-09 00:00:00
Firefox and Xulrunner vulnerabilities
2010-12-09 00:00:00
centos
centos
firefox security update
2011-01-27 08:53:21
debian
debian
[BSA-013] Security Update for iceweasel
2011-01-02 19:45:28
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-12-09 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2011-01-05 11:25:44
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
osv
osv
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.174

Percentile

96.1%

JSON
Related for UB:CVE-2010-3768
securityvulns2mozilla1cve1nvd1prion1cvelist1veracode1openvas60redhat2nessus38oraclelinux2fedora16ubuntu2centos1debian1freebsd1suse2gentoo1osv1