CVE-2010-0176

Severity

93%

Complexity

86%

Confidentiality

165%

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Mozilla

First reported 14 years ago

2010-04-05 17:30:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

Mozilla Firefox 3.6

3.6

Mozilla Firefox 0.1

0.1

Mozilla Firefox 0.2

0.2

Mozilla Firefox 0.3

0.3

Mozilla Firefox 0.4

0.4

Mozilla Firefox 0.5

0.5

Mozilla Firefox 0.6

0.6

Mozilla Firefox 0.6.1

0.6.1

Mozilla Firefox 0.7

0.7

Mozilla Firefox 0.7.1

0.7.1

Mozilla Firefox 0.8

0.8

Mozilla Firefox 0.9

0.9

Mozilla Firefox 0.9 rc

0.9

Mozilla Firefox 0.9.1

0.9.1

Mozilla Firefox 0.9.2

0.9.2

Mozilla Firefox 0.9.3

0.9.3

Mozilla Firefox 0.10

0.10

Mozilla Firefox 0.10.1

0.10.1

Mozilla Firefox 1.0

1.0

Mozilla Firefox 1.0 Preview Release

1.0

Mozilla Firefox 1.0.1

1.0.1

Mozilla Firefox 1.0.2

1.0.2

Mozilla Firefox 1.0.3

1.0.3

Mozilla Firefox 1.0.4

1.0.4

Mozilla Firefox 1.0.5

1.0.5

Mozilla Firefox 1.0.6

1.0.6

Mozilla Firefox 1.0.7

1.0.7

Mozilla Firefox 1.0.8

1.0.8

Mozilla Firefox 1.5

1.5

Mozilla Firefox 1.5 Beta 1

1.5

Mozilla Firefox 1.5 Beta 2

1.5

Mozilla Firefox 1.5.0.1

1.5.0.1

Mozilla Firefox 1.5.0.2

1.5.0.2

Mozilla Firefox 1.5.0.3

1.5.0.3

Mozilla Firefox 1.5.0.4

1.5.0.4

Mozilla Firefox 1.5.0.5

1.5.0.5

Mozilla Firefox 1.5.0.6

1.5.0.6

Mozilla Firefox 1.5.0.7

1.5.0.7

Mozilla Firefox 1.5.0.8

1.5.0.8

Mozilla Firefox 1.5.0.9

1.5.0.9

Mozilla Firefox 1.5.0.10

1.5.0.10

Mozilla Firefox 1.5.0.11

1.5.0.11

Mozilla Firefox 1.5.0.12

1.5.0.12

Mozilla Firefox 1.5.1

1.5.1

Mozilla Firefox 1.5.2

1.5.2

Mozilla Firefox 1.5.3

1.5.3

Mozilla Firefox 1.5.4

1.5.4

Mozilla Firefox 1.5.5

1.5.5

Mozilla Firefox 1.5.6

1.5.6

Mozilla Firefox 1.5.7

1.5.7

Mozilla Firefox 1.5.8

1.5.8

Mozilla Firefox 2.0

2.0

Mozilla Firefox 2.0.0.1

2.0.0.1

Mozilla Firefox 2.0.0.2

2.0.0.2

Mozilla Firefox 2.0.0.3

2.0.0.3

Mozilla Firefox 2.0.0.4

2.0.0.4

Mozilla Firefox 2.0.0.5

2.0.0.5

Mozilla Firefox 2.0.0.6

2.0.0.6

Mozilla Firefox 2.0.0.7

2.0.0.7

Mozilla Firefox 2.0.0.8

2.0.0.8

Mozilla Firefox 2.0.0.9

2.0.0.9

Mozilla Firefox 2.0.0.10

2.0.0.10

Mozilla Firefox 2.0.0.11

2.0.0.11

Mozilla Firefox 2.0.0.12

2.0.0.12

Mozilla Firefox 2.0.0.13

2.0.0.13

Mozilla Firefox 2.0.0.14

2.0.0.14

Mozilla Firefox 2.0.0.15

2.0.0.15

Mozilla Firefox 2.0.0.16

2.0.0.16

Mozilla Firefox 2.0.0.17

2.0.0.17

Mozilla Firefox 2.0.0.18

2.0.0.18

Mozilla Firefox 2.0.0.19

2.0.0.19

Mozilla Firefox 2.0.0.20

2.0.0.20

Mozilla Firefox 3.0

3.0

Mozilla Firefox 3.0.1

3.0.1

Mozilla Firefox 3.0.2

3.0.2

Mozilla Firefox 3.0.3

3.0.3

Mozilla Firefox 3.0.4

3.0.4

Mozilla Firefox 3.0.5

3.0.5

Mozilla Firefox 3.0.6

3.0.6

Mozilla Firefox 3.0.7

3.0.7

Mozilla Firefox 3.0.8

3.0.8

Mozilla Firefox 3.0.9

3.0.9

Mozilla Firefox 3.0.10

3.0.10

Mozilla Firefox 3.0.11

3.0.11

Mozilla Firefox 3.0.12

3.0.12

Mozilla Firefox 3.0.13

3.0.13

Mozilla Firefox 3.0.14

3.0.14

Mozilla Firefox 3.0.15

3.0.15

Mozilla Firefox 3.0.16

3.0.16

Mozilla Firefox 3.0.17

3.0.17

Mozilla Firefox 3.5

3.5

Mozilla Firefox 3.5.1

3.5.1

Mozilla Firefox 3.5.2

3.5.2

Mozilla Firefox 3.5.3

3.5.3

Mozilla Firefox 3.5.4

3.5.4

Mozilla Firefox 3.5.5

3.5.5

Mozilla Firefox 3.5.6

3.5.6

Mozilla Firefox

Mozilla Thunderbird 0.1

0.1

Mozilla Thunderbird 0.2

0.2

Mozilla Thunderbird 0.3

0.3

Mozilla Thunderbird 0.4

0.4

Mozilla Thunderbird 0.5

0.5

Mozilla Thunderbird 0.6

0.6

Mozilla Thunderbird 0.7

0.7

Mozilla Thunderbird 0.7.1

0.7.1

Mozilla Thunderbird 0.7.2

0.7.2

Mozilla Thunderbird 0.7.3

0.7.3

Mozilla Thunderbird 0.8

0.8

Mozilla Thunderbird 0.9

0.9

Mozilla Thunderbird 1.0

1.0

Mozilla Thunderbird 1.0.2

1.0.2

Mozilla Thunderbird 1.0.5

1.0.5

Mozilla Thunderbird 1.0.6

1.0.6

Mozilla Thunderbird 1.0.7

1.0.7

Mozilla Thunderbird 1.0.8

1.0.8

Mozilla Thunderbird 1.5

1.5

Mozilla Thunderbird 1.5 Beta 2

1.5

Mozilla Thunderbird 1.5.0.2

1.5.0.2

Mozilla Thunderbird 1.5.0.4

1.5.0.4

Mozilla Thunderbird 1.5.0.5

1.5.0.5

Mozilla Thunderbird 1.5.0.7

1.5.0.7

Mozilla Thunderbird 1.5.0.8

1.5.0.8

Mozilla Thunderbird 1.5.0.9

1.5.0.9

Mozilla Thunderbird 1.5.0.10

1.5.0.10

Mozilla Thunderbird 1.5.0.12

1.5.0.12

Mozilla Thunderbird 1.5.0.13

1.5.0.13

Mozilla Thunderbird 1.5.0.14

1.5.0.14

Mozilla Thunderbird 2.0

2.0

Mozilla Thunderbird 2.0.0.0

2.0.0.0

Mozilla Thunderbird 2.0.0.4

2.0.0.4

Mozilla Thunderbird 2.0.0.5

2.0.0.5

Mozilla Thunderbird 2.0.0.6

2.0.0.6

Mozilla Thunderbird 2.0.0.9

2.0.0.9

Mozilla Thunderbird 2.0.0.12

2.0.0.12

Mozilla Thunderbird 2.0.0.14

2.0.0.14

Mozilla Thunderbird 2.0.0.16

2.0.0.16

Mozilla Thunderbird 2.0.0.17

2.0.0.17

Mozilla Thunderbird 2.0.0.18

2.0.0.18

Mozilla Thunderbird 2.0.0.19

2.0.0.19

Mozilla Thunderbird 2.0.0.21

2.0.0.21

Mozilla Thunderbird 2.0.0.22

2.0.0.22

Mozilla Thunderbird 2.0.0.23

2.0.0.23

Mozilla Thunderbird 3.0.1

3.0.1

Mozilla Thunderbird 3.0.2

3.0.2

Mozilla Thunderbird

Mozilla SeaMonkey 1.0

1.0

Mozilla SeaMonkey 1.0 alpha

1.0

Mozilla SeaMonkey 1.0 beta

1.0

Mozilla SeaMonkey 1.0.1

1.0.1

Mozilla SeaMonkey 1.0.2

1.0.2

Mozilla SeaMonkey 1.0.3

1.0.3

Mozilla SeaMonkey 1.0.4

1.0.4

Mozilla SeaMonkey 1.0.5

1.0.5

Mozilla SeaMonkey 1.0.6

1.0.6

Mozilla SeaMonkey 1.0.7

1.0.7

Mozilla SeaMonkey 1.0.8

1.0.8

Mozilla SeaMonkey 1.0.9

1.0.9

Mozilla SeaMonkey 1.1

1.1

Mozilla SeaMonkey 1.1 alpha

1.1

Mozilla SeaMonkey 1.1 beta

1.1

Mozilla Seamonkey 1.1.1

1.1.1

Mozilla Seamonkey 1.1.2

1.1.2

Mozilla Seamonkey 1.1.3

1.1.3

Mozilla Seamonkey 1.1.4

1.1.4

Mozilla Seamonkey 1.1.5

1.1.5

Mozilla Seamonkey 1.1.6

1.1.6

Mozilla Seamonkey 1.1.7

1.1.7

Mozilla SeaMonkey 1.1.8

1.1.8

Mozilla SeaMonkey 1.1.9

1.1.9

Mozilla SeaMonkey 1.1.10

1.1.10

Mozilla SeaMonkey 1.1.11

1.1.11

Mozilla SeaMonkey 1.1.12

1.1.12

Mozilla SeaMonkey 1.1.13

1.1.13

Mozilla SeaMonkey 1.1.14

1.1.14

Mozilla SeaMonkey 1.1.15

1.1.15

Mozilla SeaMonkey 1.1.16

1.1.16

Mozilla SeaMonkey 1.1.17

1.1.17

Mozilla Seamonkey 1.1.18

1.1.18

Mozilla Seamonkey 1.1.19

1.1.19

Mozilla SeaMonkey 2.0

2.0

Mozilla SeaMonkey 2.0 Alpha 1

2.0

Mozilla SeaMonkey 2.0 Alpha 2

2.0

Mozilla SeaMonkey 2.0 Alpha 3

2.0

Mozilla SeaMonkey 2.0 Beta 1

2.0

Mozilla SeaMonkey 2.0 Beta 2

2.0

Mozilla SeaMonkey 2.0 RC1

2.0

Mozilla SeaMonkey 2.0 RC2

2.0

Mozilla SeaMonkey 2.0.1

2.0.1

Mozilla SeaMonkey 2.0.2

2.0.2

Mozilla SeaMonkey

Mozilla SeaMonkey 2.0.4

2.0.4

References

FEDORA-2010-5526

FEDORA-2010-5539

FEDORA-2010-5561

SUSE-SR:2010:013

38566

Vendor Advisory

39117

Vendor Advisory

39136

Vendor Advisory

39204

Vendor Advisory

39240

Vendor Advisory

39242

Vendor Advisory

39243

Vendor Advisory

39308

39397

1023776

1023782

USN-921-1

DSA-2027

MDVSA-2010:070

http://www.mozilla.org/security/announce/2010/mfsa2010-18.html

RHSA-2010:0332

RHSA-2010:0333

ADV-2010-0748

Vendor Advisory

ADV-2010-0764

Vendor Advisory

ADV-2010-0765

Vendor Advisory

ADV-2010-0781

ADV-2010-0790

ADV-2010-0849

https://bugzilla.mozilla.org/show_bug.cgi?id=538308

firefox-nstreecontentview-code-exec(57392)

oval:org.mitre.oval:def:11052

oval:org.mitre.oval:def:7222

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.