CVE-2010-3167 The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node remova...
HighCVSS 9.3
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 3.6 | No fix listed |
| mozilla Firefox | = 3.6.2 | No fix listed |
| mozilla Firefox | = 3.6.3 | No fix listed |
| mozilla Firefox | = 3.6.4 | No fix listed |
| mozilla Firefox | = 3.6.6 | No fix listed |
| mozilla Firefox | = 3.6.7 | No fix listed |
| mozilla Firefox | = 3.6.8 | No fix listed |
| mozilla Firefox | <= 3.5.11 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0-preview_release | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla Firefox | = 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0.7 | No fix listed |
| mozilla Firefox | = 1.0.8 | No fix listed |
| mozilla Firefox | = 1.5 | No fix listed |
| mozilla Firefox | = 1.5-beta1 | No fix listed |
| mozilla Firefox | = 1.5-beta2 | No fix listed |
| mozilla Firefox | = 1.5.0.1 | No fix listed |
| mozilla Firefox | = 1.5.0.2 | No fix listed |
| mozilla Firefox | = 1.5.0.3 | No fix listed |
| mozilla Firefox | = 1.5.0.4 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.5.0.5 | No fix listed |
| mozilla Firefox | = 1.5.0.6 | No fix listed |
| mozilla Firefox | = 1.5.0.7 | No fix listed |
| mozilla Firefox | = 1.5.0.8 | No fix listed |
| mozilla Firefox | = 1.5.0.9 | No fix listed |
| mozilla Firefox | = 1.5.0.10 | No fix listed |
| mozilla Firefox | = 1.5.0.11 | No fix listed |
| mozilla Firefox | = 1.5.0.12 | No fix listed |
| mozilla Firefox | = 1.5.1 | No fix listed |
| mozilla Firefox | = 1.5.2 | No fix listed |
| mozilla Firefox | = 1.5.3 | No fix listed |
| mozilla Firefox | = 1.5.4 | No fix listed |
| mozilla Firefox | = 1.5.5 | No fix listed |
| mozilla Firefox | = 1.5.6 | No fix listed |
| mozilla Firefox | = 1.5.7 | No fix listed |
| mozilla Firefox | = 1.5.8 | No fix listed |
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla Firefox | = 2.0.0.4 | No fix listed |
| mozilla Firefox | = 2.0.0.5 | No fix listed |
| mozilla Firefox | = 2.0.0.6 | No fix listed |
| mozilla Firefox | = 2.0.0.7 | No fix listed |
| mozilla Firefox | = 2.0.0.8 | No fix listed |
| mozilla Firefox | = 2.0.0.9 | No fix listed |
| mozilla Firefox | = 2.0.0.10 | No fix listed |
| mozilla Firefox | = 2.0.0.11 | No fix listed |
| mozilla Firefox | = 2.0.0.12 | No fix listed |
| mozilla Firefox | = 2.0.0.13 | No fix listed |
| mozilla Firefox | = 2.0.0.14 | No fix listed |
| mozilla Firefox | = 2.0.0.15 | No fix listed |
| mozilla Firefox | = 2.0.0.16 | No fix listed |
| mozilla Firefox | = 2.0.0.17 | No fix listed |
| mozilla Firefox | = 2.0.0.18 | No fix listed |
| mozilla Firefox | = 2.0.0.19 | No fix listed |
| mozilla Firefox | = 2.0.0.20 | No fix listed |
| mozilla Firefox | = 3.0 | No fix listed |
| mozilla Firefox | = 3.0.1 | No fix listed |
| mozilla Firefox | = 3.0.2 | No fix listed |
| mozilla Firefox | = 3.0.3 | No fix listed |
| mozilla Firefox | = 3.0.4 | No fix listed |
| mozilla Firefox | = 3.0.5 | No fix listed |
| mozilla Firefox | = 3.0.6 | No fix listed |
| mozilla Firefox | = 3.0.7 | No fix listed |
| mozilla Firefox | = 3.0.8 | No fix listed |
| mozilla Firefox | = 3.0.9 | No fix listed |
| mozilla Firefox | = 3.0.10 | No fix listed |
| mozilla Firefox | = 3.0.11 | No fix listed |
| mozilla Firefox | = 3.0.12 | No fix listed |
| mozilla Firefox | = 3.0.13 | No fix listed |
| mozilla Firefox | = 3.0.14 | No fix listed |
| mozilla Firefox | = 3.0.15 | No fix listed |
| mozilla Firefox | = 3.0.16 | No fix listed |
| mozilla Firefox | = 3.0.17 | No fix listed |
| mozilla Firefox | = 3.5 | No fix listed |
| mozilla Firefox | = 3.5.1 | No fix listed |
| mozilla Firefox | = 3.5.2 | No fix listed |
| mozilla Firefox | = 3.5.3 | No fix listed |
| mozilla Firefox | = 3.5.4 | No fix listed |
| mozilla Firefox | = 3.5.5 | No fix listed |
| mozilla Firefox | = 3.5.6 | No fix listed |
| mozilla Firefox | = 3.5.7 | No fix listed |
| mozilla Firefox | = 3.5.8 | No fix listed |
| mozilla Firefox | = 3.5.9 | No fix listed |
| mozilla Firefox | = 3.5.10 | No fix listed |
| mozilla seamonkey | <= 2.0.6 | No fix listed |
| mozilla seamonkey | = 1.0 | No fix listed |
| mozilla seamonkey | = 1.0-alpha | No fix listed |
| mozilla seamonkey | = 1.0-beta | No fix listed |
| mozilla seamonkey | = 1.0.1 | No fix listed |
| mozilla seamonkey | = 1.0.2 | No fix listed |
| mozilla seamonkey | = 1.0.3 | No fix listed |
| mozilla seamonkey | = 1.0.4 | No fix listed |
| mozilla seamonkey | = 1.0.5 | No fix listed |
| mozilla seamonkey | = 1.0.6 | No fix listed |
| mozilla seamonkey | = 1.0.7 | No fix listed |
| mozilla seamonkey | = 1.0.8 | No fix listed |
| mozilla seamonkey | = 1.0.9 | No fix listed |
| mozilla seamonkey | = 1.1 | No fix listed |
| mozilla seamonkey | = 1.1-alpha | No fix listed |
| mozilla seamonkey | = 1.1-beta | No fix listed |
| mozilla seamonkey | = 1.1.1 | No fix listed |
| mozilla seamonkey | = 1.1.2 | No fix listed |
| mozilla seamonkey | = 1.1.3 | No fix listed |
| mozilla seamonkey | = 1.1.4 | No fix listed |
| mozilla seamonkey | = 1.1.5 | No fix listed |
| mozilla seamonkey | = 1.1.6 | No fix listed |
| mozilla seamonkey | = 1.1.7 | No fix listed |
| mozilla seamonkey | = 1.1.8 | No fix listed |
| mozilla seamonkey | = 1.1.9 | No fix listed |
| mozilla seamonkey | = 1.1.10 | No fix listed |
| mozilla seamonkey | = 1.1.11 | No fix listed |
| mozilla seamonkey | = 1.1.12 | No fix listed |
| mozilla seamonkey | = 1.1.13 | No fix listed |
| mozilla seamonkey | = 1.1.14 | No fix listed |
| mozilla seamonkey | = 1.1.15 | No fix listed |
| mozilla seamonkey | = 1.1.16 | No fix listed |
| mozilla seamonkey | = 1.1.17 | No fix listed |
| mozilla seamonkey | = 1.1.18 | No fix listed |
| mozilla seamonkey | = 1.1.19 | No fix listed |
| mozilla seamonkey | = 1.5.0.8 | No fix listed |
| mozilla seamonkey | = 1.5.0.9 | No fix listed |
| mozilla seamonkey | = 1.5.0.10 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0a1pre | No fix listed |
| mozilla Thunderbird | <= 3.0.6 | No fix listed |
| mozilla Thunderbird | = 0.1 | No fix listed |
| mozilla Thunderbird | = 0.2 | No fix listed |
| mozilla Thunderbird | = 0.3 | No fix listed |
| mozilla Thunderbird | = 0.4 | No fix listed |
| mozilla Thunderbird | = 0.5 | No fix listed |
| mozilla Thunderbird | = 0.6 | No fix listed |
| mozilla Thunderbird | = 0.7 | No fix listed |
| mozilla Thunderbird | = 0.7.1 | No fix listed |
| mozilla Thunderbird | = 0.7.2 | No fix listed |
| mozilla Thunderbird | = 0.7.3 | No fix listed |
| mozilla Thunderbird | = 0.8 | No fix listed |
| mozilla Thunderbird | = 0.9 | No fix listed |
| mozilla Thunderbird | = 1.0 | No fix listed |
| mozilla Thunderbird | = 1.0.1 | No fix listed |
| mozilla Thunderbird | = 1.0.2 | No fix listed |
| mozilla Thunderbird | = 1.0.3 | No fix listed |
| mozilla Thunderbird | = 1.0.4 | No fix listed |
| mozilla Thunderbird | = 1.0.5 | No fix listed |
| mozilla Thunderbird | = 1.0.6 | No fix listed |
| mozilla Thunderbird | = 1.0.7 | No fix listed |
| mozilla Thunderbird | = 1.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5 | No fix listed |
| mozilla Thunderbird | = 1.5-beta2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.1 | No fix listed |
| mozilla Thunderbird | = 1.5.0.2 | No fix listed |
| mozilla Thunderbird | = 1.5.0.3 | No fix listed |
| mozilla Thunderbird | = 1.5.0.4 | No fix listed |
| mozilla Thunderbird | = 1.5.0.5 | No fix listed |
| mozilla Thunderbird | = 1.5.0.6 | No fix listed |
| mozilla Thunderbird | = 1.5.0.7 | No fix listed |
| mozilla Thunderbird | = 1.5.0.8 | No fix listed |
| mozilla Thunderbird | = 1.5.0.9 | No fix listed |
| mozilla Thunderbird | = 1.5.0.10 | No fix listed |
| mozilla Thunderbird | = 1.5.0.11 | No fix listed |
| mozilla Thunderbird | = 1.5.0.12 | No fix listed |
| mozilla Thunderbird | = 1.5.0.13 | No fix listed |
| mozilla Thunderbird | = 1.5.0.14 | No fix listed |
| mozilla Thunderbird | = 1.5.1 | No fix listed |
| mozilla Thunderbird | = 1.5.2 | No fix listed |
| mozilla Thunderbird | = 2.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.0 | No fix listed |
| mozilla Thunderbird | = 2.0.0.1 | No fix listed |
| mozilla Thunderbird | = 2.0.0.2 | No fix listed |
| mozilla Thunderbird | = 2.0.0.3 | No fix listed |
| mozilla Thunderbird | = 2.0.0.4 | No fix listed |
| mozilla Thunderbird | = 2.0.0.5 | No fix listed |
| mozilla Thunderbird | = 2.0.0.6 | No fix listed |
| mozilla Thunderbird | = 2.0.0.7 | No fix listed |
| mozilla Thunderbird | = 2.0.0.8 | No fix listed |
| mozilla Thunderbird | = 2.0.0.9 | No fix listed |
| mozilla Thunderbird | = 2.0.0.12 | No fix listed |
| mozilla Thunderbird | = 2.0.0.14 | No fix listed |
| mozilla Thunderbird | = 2.0.0.16 | No fix listed |
| mozilla Thunderbird | = 2.0.0.17 | No fix listed |
| mozilla Thunderbird | = 2.0.0.18 | No fix listed |
| mozilla Thunderbird | = 2.0.0.19 | No fix listed |
References
- blogs.sun.com
- FEDORA-2010-14362 vendor-advisory
- SUSE-SA:2010:049 vendor-advisory
- 42867 third-party-advisory
- support.avaya.com
- support.avaya.com
- DSA-2106 vendor-advisory
- MDVSA-2010:173 vendor-advisory
- www.mozilla.org vendor-advisory
- 43097 vdb-entry
- ADV-2010-2323 vdb-entry
- ADV-2011-0061 vdb-entry
- www.zerodayinitiative.com
- bugzilla.mozilla.org
- mozilla-nstreecontentview-code-execution(61661) vdb-entry
- oval:org.mitre.oval:def:12136 signature vdb-entry