CVE-2010-0175

Mozilla remote code execution with use-after-free in nsTreeSelection

Published Apr 5, 2010 CVSS 2.0 · 9.3 Critical EPSS 7.0% KEV · Not listed
Description
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2027-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0206 Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
Ubuntu USN Ubuntu USN USN-920-1 Firefox 3.0 and Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-921-1 Firefox 3.5 and Xulrunner vulnerabilities
References
Link Providers
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html cve-icon cve-icon
http://secunia.com/advisories/38566 cve-icon cve-icon
http://secunia.com/advisories/39117 cve-icon cve-icon
http://secunia.com/advisories/39136 cve-icon cve-icon
http://secunia.com/advisories/39204 cve-icon cve-icon
http://secunia.com/advisories/39240 cve-icon cve-icon
http://secunia.com/advisories/39242 cve-icon cve-icon
http://secunia.com/advisories/39243 cve-icon cve-icon
http://secunia.com/advisories/39308 cve-icon cve-icon
http://secunia.com/advisories/39397 cve-icon cve-icon
http://securitytracker.com/id?1023780 cve-icon cve-icon
http://securitytracker.com/id?1023782 cve-icon cve-icon
http://ubuntu.com/usn/usn-921-1 cve-icon cve-icon
http://www.debian.org/security/2010/dsa-2027 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2010:070 cve-icon cve-icon
http://www.mozilla.org/security/announce/2010/mfsa2010-17.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0332.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0333.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/510542/100/0/threaded cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0748 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0764 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0765 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0781 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0790 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0849 cve-icon cve-icon
http://www.zerodayinitiative.com/advisories/ZDI-10-050 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=375928 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=540100 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/57390 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2010-0175 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2010-0175 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:37 AM
Reserved
Jan 6, 2010, 12:00 AM
Status
Modified
Published
Apr 5, 2010, 5:30 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Critical
Public date
Mar 30, 2010, 12:00 AM