CVE-2010-3772

Mozilla crash and remote code execution using HTML tags inside a XUL tree (MFSA 2010-77)

Published Dec 10, 2010 CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed
Description
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2132-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2010-3751 Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element.
Ubuntu USN Ubuntu USN USN-1019-1 Firefox and Xulrunner vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:18 AM
Reserved
Oct 5, 2010, 12:00 AM
Status
Modified
Published
Dec 10, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:23 PM
Severity
Critical
Public date
Dec 9, 2010, 12:00 AM