CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attack...
HighCVSS 9.3
EPSS 83.2%
CISA KEV
added 2025-10-06 · due 2025-10-27
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
CISA Known Exploited Vulnerability
- Date added
- 2025-10-06
- Due date (FCEB)
- 2025-10-27
- Ransomware use
- Unknown
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 3.5 | No fix listed |
| mozilla Firefox | = 3.5.1 | No fix listed |
| mozilla Firefox | = 3.5.2 | No fix listed |
| mozilla Firefox | = 3.5.3 | No fix listed |
| mozilla Firefox | = 3.5.4 | No fix listed |
| mozilla Firefox | = 3.5.5 | No fix listed |
| mozilla Firefox | = 3.5.6 | No fix listed |
| mozilla Firefox | = 3.5.7 | No fix listed |
| mozilla Firefox | = 3.5.8 | No fix listed |
| mozilla Firefox | = 3.5.9 | No fix listed |
| mozilla Firefox | = 3.5.10 | No fix listed |
| mozilla Firefox | = 3.5.11 | No fix listed |
| mozilla Firefox | = 3.5.12 | No fix listed |
| mozilla Firefox | = 3.5.13 | No fix listed |
| mozilla Firefox | = 3.5.14 | No fix listed |
| mozilla Firefox | = 3.6 | No fix listed |
| mozilla Firefox | = 3.6.2 | No fix listed |
| mozilla Firefox | = 3.6.3 | No fix listed |
| mozilla Firefox | = 3.6.4 | No fix listed |
| mozilla Firefox | = 3.6.6 | No fix listed |
| mozilla Firefox | = 3.6.7 | No fix listed |
| mozilla Firefox | = 3.6.8 | No fix listed |
| mozilla Firefox | = 3.6.9 | No fix listed |
| mozilla Firefox | = 3.6.10 | No fix listed |
| mozilla Firefox | = 3.6.11 | No fix listed |
Show 31 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Thunderbird | = 3.0.1 | No fix listed |
| mozilla Thunderbird | = 3.0.2 | No fix listed |
| mozilla Thunderbird | = 3.0.3 | No fix listed |
| mozilla Thunderbird | = 3.0.4 | No fix listed |
| mozilla Thunderbird | = 3.0.5 | No fix listed |
| mozilla Thunderbird | = 3.0.6 | No fix listed |
| mozilla Thunderbird | = 3.0.7 | No fix listed |
| mozilla Thunderbird | = 3.0.8 | No fix listed |
| mozilla Thunderbird | = 3.0.9 | No fix listed |
| mozilla Thunderbird | = 3.1.1 | No fix listed |
| mozilla Thunderbird | = 3.1.2 | No fix listed |
| mozilla Thunderbird | = 3.1.3 | No fix listed |
| mozilla Thunderbird | = 3.1.4 | No fix listed |
| mozilla Thunderbird | = 3.1.5 | No fix listed |
| mozilla seamonkey | = 2.0 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_1 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_2 | No fix listed |
| mozilla seamonkey | = 2.0-alpha_3 | No fix listed |
| mozilla seamonkey | = 2.0-beta_1 | No fix listed |
| mozilla seamonkey | = 2.0-beta_2 | No fix listed |
| mozilla seamonkey | = 2.0-rc1 | No fix listed |
| mozilla seamonkey | = 2.0-rc2 | No fix listed |
| mozilla seamonkey | = 2.0.1 | No fix listed |
| mozilla seamonkey | = 2.0.2 | No fix listed |
| mozilla seamonkey | = 2.0.3 | No fix listed |
| mozilla seamonkey | = 2.0.4 | No fix listed |
| mozilla seamonkey | = 2.0.5 | No fix listed |
| mozilla seamonkey | = 2.0.6 | No fix listed |
| mozilla seamonkey | = 2.0.7 | No fix listed |
| mozilla seamonkey | = 2.0.8 | No fix listed |
| mozilla seamonkey | = 2.0.9 | No fix listed |
References
- blog.mozilla.com vendor-advisory
- blogs.sun.com broken-link
- isc.sans.edu press-media-coverage
- FEDORA-2010-17105 third-party-advisory vendor-advisory
- FEDORA-2010-16883 third-party-advisory vendor-advisory
- FEDORA-2010-16897 third-party-advisory vendor-advisory
- FEDORA-2010-16885 third-party-advisory vendor-advisory
- norman.com product
- 41761 third-party-advisory vendor-advisory
- 41965 third-party-advisory vendor-advisory
- 41966 third-party-advisory vendor-advisory
- 41969 third-party-advisory vendor-advisory
- 41975 third-party-advisory vendor-advisory
- 42003 third-party-advisory vendor-advisory
- 42008 third-party-advisory vendor-advisory
- 42043 third-party-advisory vendor-advisory
- 42867 third-party-advisory vendor-advisory
- SSA:2010-305-01 third-party-advisory vendor-advisory
- support.avaya.com third-party-advisory
- support.avaya.com third-party-advisory
- DSA-2124 third-party-advisory vendor-advisory
- 15341 exploit
- 15342 exploit
- 15352 exploit
- MDVSA-2010:213 third-party-advisory vendor-advisory
- MDVSA-2010:219 third-party-advisory vendor-advisory
- www.mozilla.org third-party-advisory
- www.norman.com broken-link
- www.norman.com broken-link
- RHSA-2010:0808 third-party-advisory vendor-advisory
- RHSA-2010:0809 third-party-advisory vendor-advisory
- RHSA-2010:0810 third-party-advisory vendor-advisory
- RHSA-2010:0861 third-party-advisory vendor-advisory
- RHSA-2010:0896 third-party-advisory vendor-advisory
- 44425 broken-link vdb-entry
- 1024645 broken-link vdb-entry
- 1024650 broken-link vdb-entry
- 1024651 broken-link vdb-entry
- USN-1011-2 third-party-advisory vendor-advisory
- USN-1011-3 third-party-advisory vendor-advisory
- USN-1011-1 third-party-advisory vendor-advisory
- ADV-2010-2837 vdb-entry vendor-advisory
- ADV-2010-2857 vdb-entry vendor-advisory
- ADV-2010-2864 vdb-entry vendor-advisory
- ADV-2010-2871 vdb-entry vendor-advisory
- ADV-2011-0061 vdb-entry vendor-advisory
- bugzilla.mozilla.org issue-tracking
- bugzilla.redhat.com issue-tracking
- oval:org.mitre.oval:def:12108 signature third-party-advisory vdb-entry
- RHSA-2010:0812 third-party-advisory vendor-advisory
- www.cisa.gov government-resource us-government-resource