Lucene search
Ubuntu.comUB:CVE-2010-3769HistoryDec 10, 2010 - 12:00 a.m.
CVE-2010-3769
2010-12-1000:00:00
ubuntu.com
ubuntu.com
18
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.2
Percentile
96.4%
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x
before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and
SeaMonkey before 2.0.11 on Windows does not properly handle long strings,
which allows remote attackers to execute arbitrary code via a crafted
document.write call that triggers a buffer over-read.
Notes
| Author | Note |
|---|---|
| jdstrand | Ubuntu 11.04 (Natty Narwhal) has 4.0b7. Fixes will be in 4.0b8. thunderbird low (javascript not enabled by default) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 3.6.13+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | firefox | < 3.6.13+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | firefox | < 4.0~b8+nobinonly-0ubuntu3 | UNKNOWN |
| ubuntu | 8.04 | noarch | firefox-3.0 | < 3.6.13+build3+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | firefox-3.5 | < 3.6.13+build3+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | seamonkey | < 2.0.11+build1+nobinonly-0ubuntu1 | UNKNOWN |
Related
cve
cve
CVE-2010-3769
2010-12-10 19:00:02
nvd
nvd
CVE-2010-3769
2010-12-10 19:00:02
cvelist
cvelist
CVE-2010-3769
2010-12-10 18:00:00
prion
prion
Buffer overflow
2010-12-10 19:00:00
mozilla
mozilla
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-75
2010-12-10 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2010-12-10 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities dec-10 (Windows)
2010-12-27 00:00:00
Mozilla Products Multiple Vulnerabilities (MFSA2010-74, MFSA2010-75, MFSA2010-78) - Windows
2010-12-27 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:258 (mozilla-thunderbird)
2010-12-28 00:00:00
nessus
nessus
Mozilla Thunderbird < 3.0.11 Multiple Vulnerabilities
2010-12-10 00:00:00
Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities
2010-12-10 00:00:00
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:258)
2010-12-21 00:00:00
debian
debian
[SECURITY] [DSA 2132-1] New xulrunner packages fix several vulnerabilities
2010-12-11 12:03:17
[BSA-013] Security Update for iceweasel
2011-01-02 19:45:28
osv
osv
xulrunner - several vulnerabilities
2010-12-11 00:00:00
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-12-09 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2011-01-05 11:25:44
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.2
Percentile
96.4%
Related for UB:CVE-2010-3769