CVE-2010-2753
Fixed in a distro release EPSS 7%
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 5.0 | xulrunner | 1.9.0.19-3 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.57.el3 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.6.7-2.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.6.7-2.el4 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-60.el4 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-28.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-28.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.6.7-2.el5 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.6.7-2.el5 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.24-6.el5 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.24-6.el5 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.2.7-2.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.2.7-2.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.2.7-2.el5 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.24-6.el5 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.24-6.el5 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |