National Cyber Awareness System

Vulnerability Summary for CVE-2010-1121

Overview

Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=555109

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=555109

External Source: VUPEN

Name: ADV-2010-1773

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/1773

External Source: VUPEN

Name: ADV-2010-1640

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/1640

External Source: VUPEN

Name: ADV-2010-1592

Hyperlink:http://www.vupen.com/english/advisories/2010/1592

External Source: VUPEN

Name: ADV-2010-1557

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/1557

External Source: UBUNTU

Name: USN-930-2

Hyperlink:http://www.ubuntu.com/usn/usn-930-2

External Source: SECTRACK

Name: 1023817

Hyperlink:http://www.securitytracker.com/id?1023817

External Source: REDHAT

Name: RHSA-2010:0501

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0501.html

External Source: REDHAT

Name: RHSA-2010:0500

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0500.html

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/2010/mfsa2010-25.html

Type: Advisory

Hyperlink:http://www.mozilla.org/security/announce/2010/mfsa2010-25.html

External Source: UBUNTU

Name: USN-930-1

Hyperlink:http://ubuntu.com/usn/usn-930-1

External Source: MISC

Name: http://twitter.com/thezdi/statuses/11005277222

Hyperlink:http://twitter.com/thezdi/statuses/11005277222

External Source: CONFIRM

Name: http://support.avaya.com/css/P8/documents/100091069

Hyperlink:http://support.avaya.com/css/P8/documents/100091069

External Source: SECUNIA

Name: 40481

Type: Advisory

Hyperlink:http://secunia.com/advisories/40481

External Source: SECUNIA

Name: 40401

Type: Advisory

Hyperlink:http://secunia.com/advisories/40401

External Source: SECUNIA

Name: 40326

Type: Advisory

Hyperlink:http://secunia.com/advisories/40326

External Source: SECUNIA

Name: 40323

Type: Advisory

Hyperlink:http://secunia.com/advisories/40323

External Source: OVAL

Name: oval:org.mitre.oval:def:6844

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6844

External Source: OVAL

Name: oval:org.mitre.oval:def:10924

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10924

External Source: MISC

Name: http://news.cnet.com/8301-27080_3-20001126-245.html

Hyperlink:http://news.cnet.com/8301-27080_3-20001126-245.html

External Source: SUSE

Name: SUSE-SA:2010:030

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html

External Source: FEDORA

Name: FEDORA-2010-10361

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html

External Source: FEDORA

Name: FEDORA-2010-10344

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html

External Source: MISC

Name: http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010

Hyperlink:http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010

References to Check Content

Identifier:oval:org.mitre.oval:def:10924

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10924

Identifier:oval:org.mitre.oval:def:6844

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6844