National Cyber Awareness System

Vulnerability Summary for CVE-2010-3765

Overview

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: REDHAT

Name: RHSA-2010:0812

Hyperlink:https://rhn.redhat.com/errata/RHSA-2010-0812.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=646997

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=646997

External Source: MISC

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53

External Source: CONFIRM

Name: https://bugzilla.mozilla.org/show_bug.cgi?id=607222

Hyperlink:https://bugzilla.mozilla.org/show_bug.cgi?id=607222

External Source: VUPEN

Name: ADV-2011-0061

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0061

External Source: VUPEN

Name: ADV-2010-2871

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/2871

External Source: VUPEN

Name: ADV-2010-2864

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/2864

External Source: VUPEN

Name: ADV-2010-2857

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/2857

External Source: VUPEN

Name: ADV-2010-2837

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/2837

External Source: UBUNTU

Name: USN-1011-3

Hyperlink:http://www.ubuntu.com/usn/USN-1011-3

External Source: UBUNTU

Name: USN-1011-2

Hyperlink:http://www.ubuntu.com/usn/USN-1011-2

External Source: UBUNTU

Name: USN-1011-1

Hyperlink:http://www.ubuntu.com/usn/usn-1011-1

External Source: SECTRACK

Name: 1024651

Hyperlink:http://www.securitytracker.com/id?1024651

External Source: SECTRACK

Name: 1024650

Hyperlink:http://www.securitytracker.com/id?1024650

External Source: SECTRACK

Name: 1024645

Hyperlink:http://www.securitytracker.com/id?1024645

External Source: BID

Name: 44425

Hyperlink:http://www.securityfocus.com/bid/44425

External Source: REDHAT

Name: RHSA-2010:0896

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0896.html

External Source: REDHAT

Name: RHSA-2010:0861

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0861.html

External Source: REDHAT

Name: RHSA-2010:0810

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0810.html

External Source: REDHAT

Name: RHSA-2010:0809

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0809.html

External Source: REDHAT

Name: RHSA-2010:0808

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0808.html

External Source: MISC

Name: http://www.norman.com/security_center/virus_description_archive/129146/

Hyperlink:http://www.norman.com/security_center/virus_description_archive/129146/

External Source: MISC

Name: http://www.norman.com/about_norman/press_center/news_archive/2010/129223/

Hyperlink:http://www.norman.com/about_norman/press_center/news_archive/2010/129223/

External Source: CONFIRM

Name: http://www.mozilla.org/security/announce/2010/mfsa2010-73.html

Hyperlink:http://www.mozilla.org/security/announce/2010/mfsa2010-73.html

External Source: MANDRIVA

Name: MDVSA-2010:219

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:219

External Source: MANDRIVA

Name: MDVSA-2010:213

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:213

External Source: EXPLOIT-DB

Name: 15352

Hyperlink:http://www.exploit-db.com/exploits/15352

External Source: EXPLOIT-DB

Name: 15342

Hyperlink:http://www.exploit-db.com/exploits/15342

External Source: EXPLOIT-DB

Name: 15341

Hyperlink:http://www.exploit-db.com/exploits/15341

External Source: DEBIAN

Name: DSA-2124

Hyperlink:http://www.debian.org/security/2010/dsa-2124

External Source: CONFIRM

Name: http://support.avaya.com/css/P8/documents/100114335

Hyperlink:http://support.avaya.com/css/P8/documents/100114335

External Source: CONFIRM

Name: http://support.avaya.com/css/P8/documents/100114329

Hyperlink:http://support.avaya.com/css/P8/documents/100114329

External Source: SLACKWARE

Name: SSA:2010-305-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706

External Source: SECUNIA

Name: 42867

Type: Advisory

Hyperlink:http://secunia.com/advisories/42867

External Source: SECUNIA

Name: 42043

Type: Advisory

Hyperlink:http://secunia.com/advisories/42043

External Source: SECUNIA

Name: 42008

Type: Advisory

Hyperlink:http://secunia.com/advisories/42008

External Source: SECUNIA

Name: 42003

Type: Advisory

Hyperlink:http://secunia.com/advisories/42003

External Source: SECUNIA

Name: 41975

Type: Advisory

Hyperlink:http://secunia.com/advisories/41975

External Source: SECUNIA

Name: 41969

Type: Advisory

Hyperlink:http://secunia.com/advisories/41969

External Source: SECUNIA

Name: 41966

Type: Advisory

Hyperlink:http://secunia.com/advisories/41966

External Source: SECUNIA

Name: 41965

Type: Advisory

Hyperlink:http://secunia.com/advisories/41965

External Source: SECUNIA

Name: 41761

Type: Advisory

Hyperlink:http://secunia.com/advisories/41761

External Source: OVAL

Name: oval:org.mitre.oval:def:12108

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12108

External Source: MISC

Name: http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter

Hyperlink:http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter

External Source: FEDORA

Name: FEDORA-2010-16885

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html

External Source: FEDORA

Name: FEDORA-2010-16897

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html

External Source: FEDORA

Name: FEDORA-2010-16883

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html

External Source: FEDORA

Name: FEDORA-2010-17105

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html

External Source: MISC

Name: http://isc.sans.edu/diary.html?storyid=9817

Hyperlink:http://isc.sans.edu/diary.html?storyid=9817

External Source: CONFIRM

Name: http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

Hyperlink:http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

External Source: CONFIRM

Name: http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/

Type: Advisory

Hyperlink:http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/

References to Check Content

Identifier:oval:org.mitre.oval:def:12108

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12108