Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-2766

Fixed in a distro release EPSS 5%

The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.

Published 2010-09-09 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 5.0xulrunner1.9.0.19-4
Red Hat Enterprise Linux 4firefox0:3.6.9-1.el4
Red Hat Enterprise Linux 4firefox-debuginfo0:3.6.9-1.el4
Red Hat Enterprise Linux 4nspr0:4.8.6-1.el4
Red Hat Enterprise Linux 4nspr-debuginfo0:4.8.6-1.el4
Red Hat Enterprise Linux 4nspr-devel0:4.8.6-1.el4
Red Hat Enterprise Linux 4nss0:3.12.7-1.el4
Red Hat Enterprise Linux 4nss-debuginfo0:3.12.7-1.el4
Red Hat Enterprise Linux 4nss-devel0:3.12.7-1.el4
Red Hat Enterprise Linux 4nss-tools0:3.12.7-1.el4
Red Hat Enterprise Linux 5firefox0:3.6.9-2.el5
Red Hat Enterprise Linux 5firefox-debuginfo0:3.6.9-2.el5
Red Hat Enterprise Linux 5nspr0:4.8.6-1.el5
Red Hat Enterprise Linux 5nspr-debuginfo0:4.8.6-1.el5
Red Hat Enterprise Linux 5nspr-devel0:4.8.6-1.el5
Red Hat Enterprise Linux 5nss0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-debuginfo0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-devel0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-pkcs11-devel0:3.12.7-2.el5
Red Hat Enterprise Linux 5nss-tools0:3.12.7-2.el5
Red Hat Enterprise Linux 5xulrunner0:1.9.2.9-1.el5
Red Hat Enterprise Linux 5xulrunner-debuginfo0:1.9.2.9-1.el5
Red Hat Enterprise Linux 5xulrunner-devel0:1.9.2.9-1.el5
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1