Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-3772

Fixed in a distro release EPSS 5%

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element.

Published 2010-12-10 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey

Distro releases

ReleasePackageFixed in
Debian 5.0xulrunner1.9.0.19-7
Red Hat Enterprise Linux 4firefox0:3.6.13-3.el4
Red Hat Enterprise Linux 4firefox-debuginfo0:3.6.13-3.el4
Red Hat Enterprise Linux 4seamonkey0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4seamonkey-chat0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4seamonkey-debuginfo0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4seamonkey-devel0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4seamonkey-dom-inspector0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4seamonkey-js-debugger0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4seamonkey-mail0:1.0.9-66.el4_8
Red Hat Enterprise Linux 4thunderbird0:1.5.0.12-34.el4
Red Hat Enterprise Linux 4thunderbird-debuginfo0:1.5.0.12-34.el4
Red Hat Enterprise Linux 5firefox0:3.6.13-2.el5
Red Hat Enterprise Linux 5firefox-debuginfo0:3.6.13-2.el5
Red Hat Enterprise Linux 5thunderbird0:2.0.0.24-13.el5_5
Red Hat Enterprise Linux 5thunderbird-debuginfo0:2.0.0.24-13.el5_5
Red Hat Enterprise Linux 5xulrunner0:1.9.2.13-3.el5
Red Hat Enterprise Linux 5xulrunner-debuginfo0:1.9.2.13-3.el5
Red Hat Enterprise Linux 5xulrunner-devel0:1.9.2.13-3.el5
Red Hat Enterprise Linux 6firefox0:3.6.13-2.el6_0
Red Hat Enterprise Linux 6firefox-debuginfo0:3.6.13-2.el6_0
Red Hat Enterprise Linux 6xulrunner0:1.9.2.13-3.el6_0
Red Hat Enterprise Linux 6xulrunner-debuginfo0:1.9.2.13-3.el6_0
Red Hat Enterprise Linux 6xulrunner-devel0:1.9.2.13-3.el6_0
Red Hat rhel productivity 5thunderbird0:2.0.0.24-13.el5_5
Red Hat rhel productivity 5thunderbird-debuginfo0:2.0.0.24-13.el5_5