National Cyber Awareness System

Vulnerability Summary for CVE-2010-1199

Overview

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=554255

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=554255

External Source: XF

Name: firefox-xslt-node-code-execution(59666)

Hyperlink:http://xforce.iss.net/xforce/xfdb/59666

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-10-113

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-10-113

External Source: VUPEN

Name: ADV-2010-1773

Hyperlink:http://www.vupen.com/english/advisories/2010/1773

External Source: VUPEN

Name: ADV-2010-1640

Hyperlink:http://www.vupen.com/english/advisories/2010/1640

External Source: VUPEN

Name: ADV-2010-1592

Hyperlink:http://www.vupen.com/english/advisories/2010/1592

External Source: VUPEN

Name: ADV-2010-1557

Hyperlink:http://www.vupen.com/english/advisories/2010/1557

External Source: VUPEN

Name: ADV-2010-1556

Hyperlink:http://www.vupen.com/english/advisories/2010/1556

External Source: VUPEN

Name: ADV-2010-1551

Hyperlink:http://www.vupen.com/english/advisories/2010/1551

External Source: UBUNTU

Name: USN-930-2

Hyperlink:http://www.ubuntu.com/usn/usn-930-2

External Source: SECTRACK

Name: 1024139

Hyperlink:http://www.securitytracker.com/id?1024139

External Source: SECTRACK

Name: 1024138

Hyperlink:http://www.securitytracker.com/id?1024138

External Source: BID

Name: 41082

Hyperlink:http://www.securityfocus.com/bid/41082

External Source: BID

Name: 41050

Hyperlink:http://www.securityfocus.com/bid/41050

External Source: BUGTRAQ

Name: 20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/511972/100/0/threaded

External Source: REDHAT

Name: RHSA-2010:0501

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0501.html

External Source: REDHAT

Name: RHSA-2010:0500

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0500.html

External Source: REDHAT

Name: RHSA-2010:0499

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0499.html

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/2010/mfsa2010-30.html

Type: Advisory

Hyperlink:http://www.mozilla.org/security/announce/2010/mfsa2010-30.html

External Source: MANDRIVA

Name: MDVSA-2010:125

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:125

External Source: EXPLOIT-DB

Name: 14949

Hyperlink:http://www.exploit-db.com/exploits/14949

External Source: UBUNTU

Name: USN-930-1

Hyperlink:http://ubuntu.com/usn/usn-930-1

External Source: CONFIRM

Name: http://support.avaya.com/css/P8/documents/100091069

Hyperlink:http://support.avaya.com/css/P8/documents/100091069

External Source: SECUNIA

Name: 40481

Hyperlink:http://secunia.com/advisories/40481

External Source: SECUNIA

Name: 40401

Hyperlink:http://secunia.com/advisories/40401

External Source: SECUNIA

Name: 40326

Hyperlink:http://secunia.com/advisories/40326

External Source: SECUNIA

Name: 40323

Hyperlink:http://secunia.com/advisories/40323

External Source: OVAL

Name: oval:org.mitre.oval:def:13287

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13287

External Source: OVAL

Name: oval:org.mitre.oval:def:10885

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10885

External Source: SUSE

Name: SUSE-SA:2010:030

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html

External Source: FEDORA

Name: FEDORA-2010-10361

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html

External Source: FEDORA

Name: FEDORA-2010-10344

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html

References to Check Content

Identifier:oval:org.mitre.oval:def:13287

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:13287

Identifier:oval:org.mitre.oval:def:10885

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10885