CVE-2010-3179
high · 9.3Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
9.3
CVSS
10.1%
EPSS (exploit prob.)
95th
EPSS percentile
2010-10-21
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| mozilla | firefox | 3.6 |
| mozilla | firefox | 3.6.2 |
| mozilla | firefox | 3.6.3 |
| mozilla | firefox | 3.6.4 |
| mozilla | firefox | 3.6.6 |
| mozilla | firefox | 3.6.7 |
| mozilla | firefox | 3.6.8 |
| mozilla | firefox | 3.6.9 |
| mozilla | firefox | 3.6.10 |
| mozilla | seamonkey | <= 2.0.8 |
| mozilla | seamonkey | 1.0 |
| mozilla | seamonkey | 1.0 |
| mozilla | seamonkey | 1.0 |
| mozilla | seamonkey | 1.0.1 |
| mozilla | seamonkey | 1.0.2 |
| mozilla | seamonkey | 1.0.3 |
| mozilla | seamonkey | 1.0.4 |
| mozilla | seamonkey | 1.0.5 |
| mozilla | seamonkey | 1.0.6 |
| mozilla | seamonkey | 1.0.7 |
| mozilla | seamonkey | 1.0.8 |
| mozilla | seamonkey | 1.0.9 |
| mozilla | seamonkey | 1.1 |
| mozilla | seamonkey | 1.1 |
| mozilla | seamonkey | 1.1 |
| mozilla | seamonkey | 1.1.1 |
| mozilla | seamonkey | 1.1.2 |
| mozilla | seamonkey | 1.1.3 |
| mozilla | seamonkey | 1.1.4 |
| mozilla | seamonkey | 1.1.5 |
| mozilla | seamonkey | 1.1.6 |
| mozilla | seamonkey | 1.1.7 |
| mozilla | seamonkey | 1.1.8 |
| mozilla | seamonkey | 1.1.9 |
| mozilla | seamonkey | 1.1.10 |
| mozilla | seamonkey | 1.1.11 |
| mozilla | seamonkey | 1.1.12 |
| mozilla | seamonkey | 1.1.13 |
| mozilla | seamonkey | 1.1.14 |
| mozilla | seamonkey | 1.1.15 |
Check a specific version with /api/v1/cve/match.
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
- http://secunia.com/advisories/42867
- http://support.avaya.com/css/P8/documents/100120156
- http://www.debian.org/security/2010/dsa-2124
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211
- http://www.mozilla.org/security/announce/2010/mfsa2010-65.html
- http://www.redhat.com/support/errata/RHSA-2010-0782.html
- http://www.redhat.com/support/errata/RHSA-2010-0861.html
- http://www.redhat.com/support/errata/RHSA-2010-0896.html
- http://www.ubuntu.com/usn/USN-997-1
- http://www.ubuntu.com/usn/USN-998-1
- http://www.vupen.com/english/advisories/2011/0061
- https://bugzilla.mozilla.org/show_bug.cgi?id=583077
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11675
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
- http://secunia.com/advisories/42867
- http://support.avaya.com/css/P8/documents/100120156
- http://www.debian.org/security/2010/dsa-2124
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-3179