CVE-2010-3179
Fixed in a distro release EPSS 10%
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
Products: mozilla firefox, mozilla seamonkey, mozilla thunderbird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 5.0 | xulrunner | 1.9.0.19-6 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.6.11-2.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.6.11-2.el4 |
| Red Hat Enterprise Linux 4 | nss | 0:3.12.8-1.el4 |
| Red Hat Enterprise Linux 4 | nss-debuginfo | 0:3.12.8-1.el4 |
| Red Hat Enterprise Linux 4 | nss-devel | 0:3.12.8-1.el4 |
| Red Hat Enterprise Linux 4 | nss-tools | 0:3.12.8-1.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.6.11-2.el5 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.6.11-2.el5 |
| Red Hat Enterprise Linux 5 | nss | 0:3.12.8-1.el5 |
| Red Hat Enterprise Linux 5 | nss-debuginfo | 0:3.12.8-1.el5 |
| Red Hat Enterprise Linux 5 | nss-devel | 0:3.12.8-1.el5 |
| Red Hat Enterprise Linux 5 | nss-pkcs11-devel | 0:3.12.8-1.el5 |
| Red Hat Enterprise Linux 5 | nss-tools | 0:3.12.8-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.2.11-2.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.2.11-2.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.2.11-2.el5 |
| Red Hat Enterprise Linux 6 | firefox | 0:3.6.12-1.el6_0 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:3.6.12-1.el6_0 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:3.1.6-1.el6_0 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:3.1.6-1.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner | 0:1.9.2.12-1.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner-debuginfo | 0:1.9.2.12-1.el6_0 |
| Red Hat Enterprise Linux 6 | xulrunner-devel | 0:1.9.2.12-1.el6_0 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |