CVE-2010-3166 Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey befor...
HighCVSS 9.3
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 3.6 | No fix listed |
| mozilla Firefox | = 3.6.2 | No fix listed |
| mozilla Firefox | = 3.6.3 | No fix listed |
| mozilla Firefox | = 3.6.4 | No fix listed |
| mozilla Firefox | = 3.6.6 | No fix listed |
| mozilla Firefox | = 3.6.7 | No fix listed |
| mozilla Firefox | = 3.6.8 | No fix listed |
| mozilla Firefox | <= 3.5.11 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0-preview_release | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla Firefox | = 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0.7 | No fix listed |
| mozilla Firefox | = 1.0.8 | No fix listed |
| mozilla Firefox | = 1.5 | No fix listed |
| mozilla Firefox | = 1.5-beta1 | No fix listed |
| mozilla Firefox | = 1.5-beta2 | No fix listed |
| mozilla Firefox | = 1.5.0.1 | No fix listed |
| mozilla Firefox | = 1.5.0.2 | No fix listed |
| mozilla Firefox | = 1.5.0.3 | No fix listed |
| mozilla Firefox | = 1.5.0.4 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.5.0.5 | No fix listed |
| mozilla Firefox | = 1.5.0.6 | No fix listed |
| mozilla Firefox | = 1.5.0.7 | No fix listed |
| mozilla Firefox | = 1.5.0.8 | No fix listed |
| mozilla Firefox | = 1.5.0.9 | No fix listed |
| mozilla Firefox | = 1.5.0.10 | No fix listed |
| mozilla Firefox | = 1.5.0.11 | No fix listed |
| mozilla Firefox | = 1.5.0.12 | No fix listed |
| mozilla Firefox | = 1.5.1 | No fix listed |
| mozilla Firefox | = 1.5.2 | No fix listed |
| mozilla Firefox | = 1.5.3 | No fix listed |
| mozilla Firefox | = 1.5.4 | No fix listed |
| mozilla Firefox | = 1.5.5 | No fix listed |
| mozilla Firefox | = 1.5.6 | No fix listed |
| mozilla Firefox | = 1.5.7 | No fix listed |
| mozilla Firefox | = 1.5.8 | No fix listed |
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla Firefox | = 2.0.0.4 | No fix listed |
| mozilla Firefox | = 2.0.0.5 | No fix listed |
| mozilla Firefox | = 2.0.0.6 | No fix listed |
| mozilla Firefox | = 2.0.0.7 | No fix listed |
| mozilla Firefox | = 2.0.0.8 | No fix listed |
| mozilla Firefox | = 2.0.0.9 | No fix listed |
| mozilla Firefox | = 2.0.0.10 | No fix listed |
| mozilla Firefox | = 2.0.0.11 | No fix listed |
| mozilla Firefox | = 2.0.0.12 | No fix listed |
| mozilla Firefox | = 2.0.0.13 | No fix listed |
| mozilla Firefox | = 2.0.0.14 | No fix listed |
| mozilla Firefox | = 2.0.0.15 | No fix listed |
| mozilla Firefox | = 2.0.0.16 | No fix listed |
| mozilla Firefox | = 2.0.0.17 | No fix listed |
| mozilla Firefox | = 2.0.0.18 | No fix listed |
| mozilla Firefox | = 2.0.0.19 | No fix listed |
| mozilla Firefox | = 2.0.0.20 | No fix listed |
| mozilla Firefox | = 3.0 | No fix listed |
| mozilla Firefox | = 3.0.1 | No fix listed |
| mozilla Firefox | = 3.0.2 | No fix listed |
| mozilla Firefox | = 3.0.3 | No fix listed |
| mozilla Firefox | = 3.0.4 | No fix listed |
| mozilla Firefox | = 3.0.5 | No fix listed |
| mozilla Firefox | = 3.0.6 | No fix listed |
| mozilla Firefox | = 3.0.7 | No fix listed |
| mozilla Firefox | = 3.0.8 | No fix listed |
| mozilla Firefox | = 3.0.9 | No fix listed |
| mozilla Firefox | = 3.0.10 | No fix listed |
| mozilla Firefox | = 3.0.11 | No fix listed |
| mozilla Firefox | = 3.0.12 | No fix listed |
| mozilla Firefox | = 3.0.13 | No fix listed |
| mozilla Firefox | = 3.0.14 | No fix listed |
| mozilla Firefox | = 3.0.15 | No fix listed |
| mozilla Firefox | = 3.0.16 | No fix listed |
| mozilla Firefox | = 3.0.17 | No fix listed |
| mozilla Firefox | = 3.5 | No fix listed |
| mozilla Firefox | = 3.5.1 | No fix listed |
| mozilla Firefox | = 3.5.2 | No fix listed |
| mozilla Firefox | = 3.5.3 | No fix listed |
| mozilla Firefox | = 3.5.4 | No fix listed |
| mozilla Firefox | = 3.5.5 | No fix listed |
| mozilla Firefox | = 3.5.6 | No fix listed |
| mozilla Firefox | = 3.5.7 | No fix listed |
| mozilla Firefox | = 3.5.8 | No fix listed |
| mozilla Firefox | = 3.5.9 | No fix listed |
| mozilla Firefox | = 3.5.10 | No fix listed |
| mozilla seamonkey | <= 2.0.6 | No fix listed |
| mozilla seamonkey | = 1.0 | No fix listed |
| mozilla seamonkey | = 1.0-alpha | No fix listed |
| mozilla seamonkey | = 1.0-beta | No fix listed |
| mozilla seamonkey | = 1.0.1 | No fix listed |
| mozilla seamonkey | = 1.0.2 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.5 | No fix listed |
| mozilla seamonkey | = 1.0.6 | No fix listed |
| mozilla seamonkey | = 1.0.7 | No fix listed |
| mozilla seamonkey | = 1.0.8 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.1 | No fix listed |
| mozilla seamonkey | = 1.1-alpha | No fix listed |
| mozilla seamonkey | = 1.1-beta | No fix listed |
| mozilla seamonkey | = 1.1.1 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla seamonkey | = 1.1.3 | No fix listed |
| mozilla seamonkey | = 1.1.4 | No fix listed |
| mozilla seamonkey | = 1.1.5 | No fix listed |
| mozilla seamonkey | = 1.1.6 | No fix listed |
| mozilla seamonkey | = 1.1.7 | No fix listed |
| mozilla seamonkey | = 1.1.8 | No fix listed |
| mozilla seamonkey | = 1.1.9 | No fix listed |
| mozilla seamonkey | = 1.1.10 | No fix listed |
| mozilla seamonkey | = 1.1.11 | No fix listed |
| mozilla seamonkey | = 1.1.12 | No fix listed |
| mozilla seamonkey | = 1.1.13 | No fix listed |
| mozilla seamonkey | = 1.1.14 | No fix listed |
| mozilla seamonkey | = 1.1.15 | No fix listed |
| mozilla seamonkey | = 1.1.16 | No fix listed |
| mozilla seamonkey | = 1.1.17 | No fix listed |
| mozilla seamonkey | = 1.1.18 | No fix listed |
| mozilla seamonkey | = 1.1.19 | No fix listed |
| mozilla seamonkey | = 1.5.0.8 | No fix listed |
| mozilla seamonkey | = 1.5.0.9 | No fix listed |
| mozilla seamonkey | = 1.5.0.10 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0a1pre | No fix listed |
| mozilla Thunderbird | <= 3.0.6 | No fix listed |
| mozilla Thunderbird | = 0.1 | No fix listed |
| mozilla Thunderbird | = 0.2 | No fix listed |
| mozilla Thunderbird | = 0.3 | No fix listed |
| mozilla Thunderbird | = 0.4 | No fix listed |
| mozilla Thunderbird | = 0.5 | No fix listed |
| mozilla Thunderbird | = 0.6 | No fix listed |
| mozilla Thunderbird | = 0.7 | No fix listed |
| mozilla Thunderbird | = 0.7.1 | No fix listed |
| mozilla Thunderbird | = 0.7.2 | No fix listed |
| mozilla Thunderbird | = 0.7.3 | No fix listed |
| mozilla Thunderbird | = 0.8 | No fix listed |
| mozilla Thunderbird | = 0.9 | No fix listed |
| mozilla Thunderbird | = 1.0 | No fix listed |
| mozilla Thunderbird | = 1.0.1 | No fix listed |
| mozilla Thunderbird | = 1.0.2 | No fix listed |
| mozilla Thunderbird | = 1.0.3 | No fix listed |
| mozilla Thunderbird | = 1.0.4 | No fix listed |
| mozilla Thunderbird | = 1.0.5 | No fix listed |
| mozilla Thunderbird | = 1.0.6 | No fix listed |
| mozilla Thunderbird | = 1.0.7 | No fix listed |
| mozilla Thunderbird | = 1.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5 | No fix listed |
| mozilla Thunderbird | = 1.5-beta2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.1 | No fix listed |
| mozilla Thunderbird | = 1.5.0.2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.3 | No fix listed |
| mozilla Thunderbird | = 1.5.0.4 | No fix listed |
| mozilla Thunderbird | = 1.5.0.5 | No fix listed |
| mozilla Thunderbird | = 1.5.0.6 | No fix listed |
| mozilla Thunderbird | = 1.5.0.7 | No fix listed |
| mozilla Thunderbird | = 1.5.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5.0.9 | No fix listed |
| mozilla Thunderbird | = 1.5.0.10 | No fix listed |
| mozilla Thunderbird | = 1.5.0.11 | No fix listed |
| mozilla Thunderbird | = 1.5.0.12 | No fix listed |
| mozilla Thunderbird | = 1.5.0.13 | No fix listed |
| mozilla Thunderbird | = 1.5.0.14 | No fix listed |
| mozilla Thunderbird | = 1.5.1 | No fix listed |
| mozilla Thunderbird | = 1.5.2 | No fix listed |
| mozilla Thunderbird | = 2.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.1 | No fix listed |
| mozilla Thunderbird | = 2.0.0.2 | No fix listed |
| mozilla Thunderbird | = 2.0.0.3 | No fix listed |
| mozilla Thunderbird | = 2.0.0.4 | No fix listed |
| mozilla Thunderbird | = 2.0.0.5 | No fix listed |
| mozilla Thunderbird | = 2.0.0.6 | No fix listed |
| mozilla Thunderbird | = 2.0.0.7 | No fix listed |
| mozilla Thunderbird | = 2.0.0.8 | No fix listed |
| mozilla Thunderbird | = 2.0.0.9 | No fix listed |
| mozilla Thunderbird | = 2.0.0.12 | No fix listed |
| mozilla Thunderbird | = 2.0.0.14 | No fix listed |
| mozilla Thunderbird | = 2.0.0.16 | No fix listed |
| mozilla Thunderbird | = 2.0.0.17 | No fix listed |
| mozilla Thunderbird | = 2.0.0.18 | No fix listed |
| mozilla Thunderbird | = 2.0.0.19 | No fix listed |
References
- blogs.sun.com
- FEDORA-2010-14362 vendor-advisory
- SUSE-SA:2010:049 vendor-advisory
- 42867 third-party-advisory
- support.avaya.com
- MDVSA-2010:173 vendor-advisory
- www.mozilla.org vendor-advisory
- 43102 vdb-entry
- ADV-2010-2323 vdb-entry
- ADV-2011-0061 vdb-entry
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:12186 signature vdb-entry