CVE-2010-1199

Severity

93%

Complexity

86%

Confidentiality

165%

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Mozilla

First reported 14 years ago

2010-06-24 12:30:00

Last updated 6 years ago

2018-10-10 19:56:00

Affected Software

Mozilla Firefox 3.5

3.5

Mozilla Firefox 3.5.1

3.5.1

Mozilla Firefox 3.5.2

3.5.2

Mozilla Firefox 3.5.3

3.5.3

Mozilla Firefox 3.5.4

3.5.4

Mozilla Firefox 3.5.5

3.5.5

Mozilla Firefox 3.5.6

3.5.6

Mozilla Firefox 3.5.7

3.5.7

Mozilla Firefox 3.5.9

3.5.9

Mozilla SeaMonkey 1.0

1.0

Mozilla SeaMonkey 1.0 alpha

1.0

Mozilla SeaMonkey 1.0 beta

1.0

Mozilla SeaMonkey 1.0.1

1.0.1

Mozilla SeaMonkey 1.0.2

1.0.2

Mozilla SeaMonkey 1.0.3

1.0.3

Mozilla SeaMonkey 1.0.4

1.0.4

Mozilla SeaMonkey 1.0.5

1.0.5

Mozilla SeaMonkey 1.0.6

1.0.6

Mozilla SeaMonkey 1.0.7

1.0.7

Mozilla SeaMonkey 1.0.8

1.0.8

Mozilla SeaMonkey 1.0.9

1.0.9

Mozilla SeaMonkey 1.1

1.1

Mozilla SeaMonkey 1.1 alpha

1.1

Mozilla SeaMonkey 1.1 beta

1.1

Mozilla Seamonkey 1.1.1

1.1.1

Mozilla Seamonkey 1.1.2

1.1.2

Mozilla Seamonkey 1.1.3

1.1.3

Mozilla Seamonkey 1.1.4

1.1.4

Mozilla Seamonkey 1.1.5

1.1.5

Mozilla Seamonkey 1.1.6

1.1.6

Mozilla Seamonkey 1.1.7

1.1.7

Mozilla SeaMonkey 1.1.8

1.1.8

Mozilla SeaMonkey 1.1.9

1.1.9

Mozilla SeaMonkey 1.1.10

1.1.10

Mozilla SeaMonkey 1.1.11

1.1.11

Mozilla SeaMonkey 1.1.12

1.1.12

Mozilla SeaMonkey 1.1.13

1.1.13

Mozilla SeaMonkey 1.1.14

1.1.14

Mozilla SeaMonkey 1.1.15

1.1.15

Mozilla SeaMonkey 1.1.16

1.1.16

Mozilla SeaMonkey 1.1.17

1.1.17

Mozilla Seamonkey 1.1.18

1.1.18

Mozilla Seamonkey 1.1.19

1.1.19

Mozilla SeaMonkey 2.0

2.0

Mozilla SeaMonkey 2.0 Alpha 1

2.0

Mozilla SeaMonkey 2.0 Alpha 2

2.0

Mozilla SeaMonkey 2.0 Alpha 3

2.0

Mozilla SeaMonkey 2.0 Beta 1

2.0

Mozilla SeaMonkey 2.0 Beta 2

2.0

Mozilla SeaMonkey 2.0 RC1

2.0

Mozilla SeaMonkey 2.0 RC2

2.0

Mozilla SeaMonkey 2.0.1

2.0.1

Mozilla SeaMonkey 2.0.2

2.0.2

Mozilla SeaMonkey 2.0.3

2.0.3

Mozilla SeaMonkey

Mozilla Firefox 3.6

3.6

Mozilla Firefox 3.6.2

3.6.2

Mozilla Firefox 3.6.3

3.6.3

Mozilla Thunderbird 0.1

0.1

Mozilla Thunderbird 0.2

0.2

Mozilla Thunderbird 0.3

0.3

Mozilla Thunderbird 0.4

0.4

Mozilla Thunderbird 0.5

0.5

Mozilla Thunderbird 0.6

0.6

Mozilla Thunderbird 0.7

0.7

Mozilla Thunderbird 0.8

0.8

Mozilla Thunderbird 0.9

0.9

Mozilla Thunderbird 1.0

1.0

Mozilla Thunderbird 1.0.2

1.0.2

Mozilla Thunderbird 1.0.5

1.0.5

Mozilla Thunderbird 1.0.6

1.0.6

Mozilla Thunderbird 1.0.7

1.0.7

Mozilla Thunderbird 1.0.8

1.0.8

Mozilla Thunderbird 1.5

1.5

Mozilla Thunderbird 1.5.0.2

1.5.0.2

Mozilla Thunderbird 1.5.0.4

1.5.0.4

Mozilla Thunderbird 1.5.0.5

1.5.0.5

Mozilla Thunderbird 1.5.0.7

1.5.0.7

Mozilla Thunderbird 1.5.0.8

1.5.0.8

Mozilla Thunderbird 1.5.0.9

1.5.0.9

Mozilla Thunderbird 1.5.0.10

1.5.0.10

Mozilla Thunderbird 1.5.0.12

1.5.0.12

Mozilla Thunderbird 1.5.0.13

1.5.0.13

Mozilla Thunderbird 1.5.0.14

1.5.0.14

Mozilla Thunderbird 2.0.0.0

2.0.0.0

Mozilla Thunderbird 2.0.0.4

2.0.0.4

Mozilla Thunderbird 2.0.0.5

2.0.0.5

Mozilla Thunderbird 2.0.0.6

2.0.0.6

Mozilla Thunderbird 2.0.0.9

2.0.0.9

Mozilla Thunderbird 2.0.0.12

2.0.0.12

Mozilla Thunderbird 2.0.0.14

2.0.0.14

Mozilla Thunderbird 2.0.0.16

2.0.0.16

Mozilla Thunderbird 2.0.0.17

2.0.0.17

Mozilla Thunderbird 2.0.0.18

2.0.0.18

Mozilla Thunderbird 2.0.0.19

2.0.0.19

Mozilla Thunderbird 3.0

3.0

Mozilla Thunderbird 3.0.1

3.0.1

Mozilla Thunderbird 3.0.2

3.0.2

Mozilla Thunderbird 3.0.3

3.0.3

Mozilla Thunderbird

References

FEDORA-2010-10344

FEDORA-2010-10361

SUSE-SA:2010:030

40323

40326

40401

40481

http://support.avaya.com/css/P8/documents/100091069

USN-930-1

14949

MDVSA-2010:125

http://www.mozilla.org/security/announce/2010/mfsa2010-30.html

Vendor Advisory

RHSA-2010:0499

RHSA-2010:0500

RHSA-2010:0501

20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability

41050

41082

1024138

1024139

USN-930-2

ADV-2010-1551

ADV-2010-1556

ADV-2010-1557

ADV-2010-1592

ADV-2010-1640

ADV-2010-1773

http://www.zerodayinitiative.com/advisories/ZDI-10-113

https://bugzilla.mozilla.org/show_bug.cgi?id=554255

firefox-xslt-node-code-execution(59666)

oval:org.mitre.oval:def:10885

oval:org.mitre.oval:def:13287

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.