csaf_redhat - rhsa-2010

rhsa-2010_0544

Vulnerability from csaf_redhat

Published

2010-07-21 01:33

Modified

2024-11-22 03:33

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-0174, CVE-2010-1200, CVE-2010-1211, CVE-2010-1214, CVE-2010-2753) An integer overflow flaw was found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-1199) Several use-after-free flaws were found in Thunderbird. Viewing an HTML mail message containing malicious content could result in Thunderbird executing arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-0175, CVE-2010-0176, CVE-2010-0177) A flaw was found in the way Thunderbird plug-ins interact. It was possible for a plug-in to reference the freed memory from a different plug-in, resulting in the execution of arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-1198) A flaw was found in the way Thunderbird handled the "Content-Disposition: attachment" HTTP header when the "Content-Type: multipart" HTTP header was also present. Loading remote HTTP content that allows arbitrary uploads and relies on the "Content-Disposition: attachment" HTTP header to prevent content from being displayed inline, could be used by an attacker to serve malicious content to users. (CVE-2010-1197) A same-origin policy bypass flaw was found in Thunderbird. Remote HTML content could steal private data from different remote HTML content Thunderbird has loaded. (CVE-2010-2754) All Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes several security issues is now\navailable for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML mail content.\nAn HTML mail message containing malicious content could cause Thunderbird\nto crash or, potentially, execute arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2010-0174, CVE-2010-1200, CVE-2010-1211,\nCVE-2010-1214, CVE-2010-2753)\n\nAn integer overflow flaw was found in the processing of malformed HTML mail\ncontent. An HTML mail message containing malicious content could cause\nThunderbird to crash or, potentially, execute arbitrary code with the\nprivileges of the user running Thunderbird. (CVE-2010-1199)\n\nSeveral use-after-free flaws were found in Thunderbird. Viewing an HTML\nmail message containing malicious content could result in Thunderbird\nexecuting arbitrary code with the privileges of the user running\nThunderbird. (CVE-2010-0175, CVE-2010-0176, CVE-2010-0177)\n\nA flaw was found in the way Thunderbird plug-ins interact. It was possible\nfor a plug-in to reference the freed memory from a different plug-in,\nresulting in the execution of arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2010-1198)\n\nA flaw was found in the way Thunderbird handled the \"Content-Disposition:\nattachment\" HTTP header when the \"Content-Type: multipart\" HTTP header was\nalso present. Loading remote HTTP content that allows arbitrary uploads and\nrelies on the \"Content-Disposition: attachment\" HTTP header to prevent\ncontent from being displayed inline, could be used by an attacker to serve\nmalicious content to users. (CVE-2010-1197)\n\nA same-origin policy bypass flaw was found in Thunderbird. Remote HTML\ncontent could steal private data from different remote HTML content\nThunderbird has loaded. (CVE-2010-2754)\n\nAll Thunderbird users should upgrade to this updated package, which\nresolves these issues. All running instances of Thunderbird must be\nrestarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0544",
        "url": "https://access.redhat.com/errata/RHSA-2010:0544"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "578147",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578147"
      },
      {
        "category": "external",
        "summary": "578149",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578149"
      },
      {
        "category": "external",
        "summary": "578150",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578150"
      },
      {
        "category": "external",
        "summary": "578152",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578152"
      },
      {
        "category": "external",
        "summary": "590804",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590804"
      },
      {
        "category": "external",
        "summary": "590828",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590828"
      },
      {
        "category": "external",
        "summary": "590833",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590833"
      },
      {
        "category": "external",
        "summary": "590850",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590850"
      },
      {
        "category": "external",
        "summary": "615455",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615455"
      },
      {
        "category": "external",
        "summary": "615462",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615462"
      },
      {
        "category": "external",
        "summary": "615466",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615466"
      },
      {
        "category": "external",
        "summary": "615488",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615488"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0544.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T03:33:49+00:00",
      "generator": {
        "date": "2024-11-22T03:33:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2010:0544",
      "initial_release_date": "2010-07-21T01:33:00+00:00",
      "revision_history": [
        {
          "date": "2010-07-21T01:33:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-07-20T21:39:35+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:33:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-28.el4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.ia64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.ia64",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-28.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.x86_64",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-28.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.i386",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.src",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-28.el4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.ppc",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.ppc",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-28.el4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.s390x",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.s390x",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-28.el4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-28.el4.s390",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-28.el4.s390",
                  "product_id": "thunderbird-0:1.5.0.12-28.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-28.el4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2010-0174",
      "discovery_date": "2010-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "578147"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0174"
        },
        {
          "category": "external",
          "summary": "RHBZ#578147",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578147"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0174",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0174"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0174",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0174"
        }
      ],
      "release_date": "2010-03-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla crashes with evidence of memory corruption"
    },
    {
      "cve": "CVE-2010-0175",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2010-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "578149"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla remote code execution with use-after-free in nsTreeSelection",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0175"
        },
        {
          "category": "external",
          "summary": "RHBZ#578149",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578149"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0175",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0175"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0175",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0175"
        }
      ],
      "release_date": "2010-03-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla remote code execution with use-after-free in nsTreeSelection"
    },
    {
      "cve": "CVE-2010-0176",
      "discovery_date": "2010-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "578150"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a \"dangling pointer vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Dangling pointer vulnerability in nsTreeContentView",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0176"
        },
        {
          "category": "external",
          "summary": "RHBZ#578150",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578150"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0176",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0176"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0176",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0176"
        }
      ],
      "release_date": "2010-03-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Dangling pointer vulnerability in nsTreeContentView"
    },
    {
      "cve": "CVE-2010-0177",
      "discovery_date": "2010-03-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "578152"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a \"dangling pointer vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Dangling pointer vulnerability in nsPluginArray",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0177"
        },
        {
          "category": "external",
          "summary": "RHBZ#578152",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=578152"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0177",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0177"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0177",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0177"
        }
      ],
      "release_date": "2010-03-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Dangling pointer vulnerability in nsPluginArray"
    },
    {
      "cve": "CVE-2010-1197",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590850"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both \"Content-Disposition: attachment\" and \"Content-Type: multipart\" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Content-Disposition: attachment ignored if Content-Type: multipart also present",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1197"
        },
        {
          "category": "external",
          "summary": "RHBZ#590850",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590850"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1197"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Content-Disposition: attachment ignored if Content-Type: multipart also present"
    },
    {
      "cve": "CVE-2010-1198",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590828"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Freed object reuse across plugin instances",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1198"
        },
        {
          "category": "external",
          "summary": "RHBZ#590828",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590828"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1198",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1198"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1198",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1198"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Freed object reuse across plugin instances"
    },
    {
      "cve": "CVE-2010-1199",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590833"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Integer Overflow in XSLT Node Sorting",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1199"
        },
        {
          "category": "external",
          "summary": "RHBZ#590833",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590833"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1199"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Integer Overflow in XSLT Node Sorting"
    },
    {
      "cve": "CVE-2010-1200",
      "discovery_date": "2010-05-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "590804"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1200"
        },
        {
          "category": "external",
          "summary": "RHBZ#590804",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=590804"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1200",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1200"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1200",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1200"
        }
      ],
      "release_date": "2010-06-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Crashes with evidence of memory corruption"
    },
    {
      "cve": "CVE-2010-1211",
      "discovery_date": "2010-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "615455"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla miscellaneous memory safety hazards",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1211"
        },
        {
          "category": "external",
          "summary": "RHBZ#615455",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615455"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1211",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1211"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1211",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1211"
        }
      ],
      "release_date": "2010-07-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla miscellaneous memory safety hazards"
    },
    {
      "cve": "CVE-2010-1214",
      "discovery_date": "2010-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "615462"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-1214"
        },
        {
          "category": "external",
          "summary": "RHBZ#615462",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615462"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-1214",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-1214"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-1214",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1214"
        }
      ],
      "release_date": "2010-07-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability"
    },
    {
      "cve": "CVE-2010-2753",
      "discovery_date": "2010-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "615466"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla nsTreeSelection dangling pointer remote code execution vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-2753"
        },
        {
          "category": "external",
          "summary": "RHBZ#615466",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615466"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-2753",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-2753"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-2753",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2753"
        }
      ],
      "release_date": "2010-07-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla nsTreeSelection dangling pointer remote code execution vulnerability"
    },
    {
      "cve": "CVE-2010-2754",
      "discovery_date": "2010-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "615488"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script\u0027s URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Cross-origin data leakage from script filename in error messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-28.el4.src",
          "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-28.el4.src",
          "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-28.el4.src",
          "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-2754"
        },
        {
          "category": "external",
          "summary": "RHBZ#615488",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=615488"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-2754",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-2754"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-2754",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2754"
        }
      ],
      "release_date": "2010-07-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-07-21T01:33:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0544"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-28.el4.src",
            "4AS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-28.el4.src",
            "4ES:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-28.el4.src",
            "4WS:thunderbird-0:1.5.0.12-28.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-28.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla Cross-origin data leakage from script filename in error messages"
    }
  ]
}

cve-2010-1214

Vulnerability from cvelistv5

Published

2010-07-30 20:00

Modified

2024-08-07 01:14

Severity ?

Summary

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=572985	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2010/mfsa2010-37.html	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:11685",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=572985"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-37.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-07-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:11685",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=572985"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-37.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1214",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:11685",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=572985",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=572985"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-37.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-37.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1214",
    "datePublished": "2010-07-30T20:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.697Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1198

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59664	vdb-entry, x_refsource_XF
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-28.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/41102	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=532246	x_refsource_CONFIRM
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176	vdb-entry, signature, x_refsource_OVAL
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "firefox-plugin-instances-code-exec(59664)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59664"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10990",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990"
          },
          {
            "name": "41102",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41102"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "name": "oval:org.mitre.oval:def:14176",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "firefox-plugin-instances-code-exec(59664)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59664"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10990",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990"
        },
        {
          "name": "41102",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41102"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "name": "oval:org.mitre.oval:def:14176",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1198",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "firefox-plugin-instances-code-exec(59664)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59664"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-28.html"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10990",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990"
            },
            {
              "name": "41102",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41102"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=532246"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "oval:org.mitre.oval:def:14176",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1198",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-2754

Vulnerability from cvelistv5

Published

2010-07-29 18:00

Modified

2024-08-07 02:46

Severity ?

Summary

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2010/mfsa2010-47.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11770	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=568564	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:46:47.296Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-47.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11770",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11770"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=568564"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-07-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script\u0027s URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-47.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11770",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11770"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=568564"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-2754",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script\u0027s URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-47.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-47.html"
            },
            {
              "name": "oval:org.mitre.oval:def:11770",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11770"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=568564",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=568564"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-2754",
    "datePublished": "2010-07-29T18:00:00",
    "dateReserved": "2010-07-14T00:00:00",
    "dateUpdated": "2024-08-07T02:46:47.296Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0176

Vulnerability from cvelistv5

Published

2010-04-05 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."

References

▼	URL	Tags
	https://exchange.xforce.ibmcloud.com/vulnerabilities/57392	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/39397	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0333.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39308	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39136	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7222	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11052	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0781	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html	vendor-advisory, x_refsource_FEDORA
	http://ubuntu.com/usn/usn-921-1	vendor-advisory, x_refsource_UBUNTU
	http://securitytracker.com/id?1023776	vdb-entry, x_refsource_SECTRACK
	http://securitytracker.com/id?1023782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2010/mfsa2010-18.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0764	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0765	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:070	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38566	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39117	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=538308	x_refsource_CONFIRM
	http://secunia.com/advisories/39243	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0748	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0849	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2010/0790	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/39242	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2010/dsa-2027	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0332.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39240	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39204	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:53.927Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "firefox-nstreecontentview-code-exec(57392)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57392"
          },
          {
            "name": "39397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39397"
          },
          {
            "name": "RHSA-2010:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
          },
          {
            "name": "39308",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39308"
          },
          {
            "name": "39136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39136"
          },
          {
            "name": "oval:org.mitre.oval:def:7222",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7222"
          },
          {
            "name": "oval:org.mitre.oval:def:11052",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11052"
          },
          {
            "name": "ADV-2010-0781",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0781"
          },
          {
            "name": "FEDORA-2010-5561",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
          },
          {
            "name": "USN-921-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-921-1"
          },
          {
            "name": "1023776",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023776"
          },
          {
            "name": "1023782",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023782"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-18.html"
          },
          {
            "name": "ADV-2010-0764",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0764"
          },
          {
            "name": "ADV-2010-0765",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0765"
          },
          {
            "name": "MDVSA-2010:070",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
          },
          {
            "name": "FEDORA-2010-5526",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
          },
          {
            "name": "38566",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38566"
          },
          {
            "name": "39117",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39117"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=538308"
          },
          {
            "name": "39243",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39243"
          },
          {
            "name": "ADV-2010-0748",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0748"
          },
          {
            "name": "ADV-2010-0849",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0849"
          },
          {
            "name": "FEDORA-2010-5539",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
          },
          {
            "name": "ADV-2010-0790",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0790"
          },
          {
            "name": "39242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39242"
          },
          {
            "name": "DSA-2027",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2027"
          },
          {
            "name": "RHSA-2010:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
          },
          {
            "name": "39240",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39240"
          },
          {
            "name": "39204",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a \"dangling pointer vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "firefox-nstreecontentview-code-exec(57392)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57392"
        },
        {
          "name": "39397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39397"
        },
        {
          "name": "RHSA-2010:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
        },
        {
          "name": "39308",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39308"
        },
        {
          "name": "39136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39136"
        },
        {
          "name": "oval:org.mitre.oval:def:7222",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7222"
        },
        {
          "name": "oval:org.mitre.oval:def:11052",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11052"
        },
        {
          "name": "ADV-2010-0781",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0781"
        },
        {
          "name": "FEDORA-2010-5561",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
        },
        {
          "name": "USN-921-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-921-1"
        },
        {
          "name": "1023776",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023776"
        },
        {
          "name": "1023782",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023782"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-18.html"
        },
        {
          "name": "ADV-2010-0764",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0764"
        },
        {
          "name": "ADV-2010-0765",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0765"
        },
        {
          "name": "MDVSA-2010:070",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
        },
        {
          "name": "FEDORA-2010-5526",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
        },
        {
          "name": "38566",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38566"
        },
        {
          "name": "39117",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39117"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=538308"
        },
        {
          "name": "39243",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39243"
        },
        {
          "name": "ADV-2010-0748",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0748"
        },
        {
          "name": "ADV-2010-0849",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0849"
        },
        {
          "name": "FEDORA-2010-5539",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
        },
        {
          "name": "ADV-2010-0790",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0790"
        },
        {
          "name": "39242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39242"
        },
        {
          "name": "DSA-2027",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2027"
        },
        {
          "name": "RHSA-2010:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
        },
        {
          "name": "39240",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39240"
        },
        {
          "name": "39204",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0176",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a \"dangling pointer vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "firefox-nstreecontentview-code-exec(57392)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57392"
            },
            {
              "name": "39397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39397"
            },
            {
              "name": "RHSA-2010:0333",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
            },
            {
              "name": "39308",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39308"
            },
            {
              "name": "39136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39136"
            },
            {
              "name": "oval:org.mitre.oval:def:7222",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7222"
            },
            {
              "name": "oval:org.mitre.oval:def:11052",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11052"
            },
            {
              "name": "ADV-2010-0781",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0781"
            },
            {
              "name": "FEDORA-2010-5561",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
            },
            {
              "name": "USN-921-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-921-1"
            },
            {
              "name": "1023776",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023776"
            },
            {
              "name": "1023782",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023782"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-18.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-18.html"
            },
            {
              "name": "ADV-2010-0764",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0764"
            },
            {
              "name": "ADV-2010-0765",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0765"
            },
            {
              "name": "MDVSA-2010:070",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
            },
            {
              "name": "FEDORA-2010-5526",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
            },
            {
              "name": "38566",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38566"
            },
            {
              "name": "39117",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39117"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=538308",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=538308"
            },
            {
              "name": "39243",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39243"
            },
            {
              "name": "ADV-2010-0748",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0748"
            },
            {
              "name": "ADV-2010-0849",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0849"
            },
            {
              "name": "FEDORA-2010-5539",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
            },
            {
              "name": "ADV-2010-0790",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0790"
            },
            {
              "name": "39242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39242"
            },
            {
              "name": "DSA-2027",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2027"
            },
            {
              "name": "RHSA-2010:0332",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
            },
            {
              "name": "39240",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39240"
            },
            {
              "name": "39204",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0176",
    "datePublished": "2010-04-05T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:53.927Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1211

Vulnerability from cvelistv5

Published

2010-07-30 20:00

Modified

2024-08-07 01:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11552	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=564705	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=567059	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=529087	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=559241	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=561539	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=528644	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=574750	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=507775	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=570657	x_refsource_CONFIRM
	http://www.mozilla.org/security/announce/2010/mfsa2010-34.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=566136	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=535926	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.650Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:11552",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11552"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=564705"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=567059"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=529087"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=559241"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561539"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528644"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=574750"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=507775"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=570657"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-34.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=566136"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535926"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-07-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:11552",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11552"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=564705"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=567059"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=529087"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=559241"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561539"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528644"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=574750"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=507775"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=570657"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-34.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=566136"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535926"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1211",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:11552",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11552"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=564705",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=564705"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=567059",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=567059"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=529087",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=529087"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=559241",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=559241"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=561539",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=561539"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=528644",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528644"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=574750",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=574750"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=507775",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=507775"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=570657",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=570657"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-34.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-34.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=566136",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=566136"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=535926",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535926"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1211",
    "datePublished": "2010-07-30T20:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0174

Vulnerability from cvelistv5

Published

2010-04-05 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7615	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9502	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/39397	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0333.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39308	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/57389	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/39136	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=546530	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0781	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html	vendor-advisory, x_refsource_FEDORA
	http://ubuntu.com/usn/usn-921-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=499844	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://securitytracker.com/id?1023781	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/0764	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0765	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:070	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38566	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39117	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-16.html	x_refsource_CONFIRM
	http://secunia.com/advisories/39243	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0748	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0849	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2010/0790	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/39242	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2010/dsa-2027	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0332.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39240	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1023775	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/39204	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:7615",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7615"
          },
          {
            "name": "oval:org.mitre.oval:def:9502",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9502"
          },
          {
            "name": "39397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39397"
          },
          {
            "name": "RHSA-2010:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
          },
          {
            "name": "39308",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39308"
          },
          {
            "name": "mozilla-browser-eng-code-exec(57389)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57389"
          },
          {
            "name": "39136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39136"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=546530"
          },
          {
            "name": "ADV-2010-0781",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0781"
          },
          {
            "name": "FEDORA-2010-5561",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
          },
          {
            "name": "USN-921-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-921-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=499844"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "1023781",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023781"
          },
          {
            "name": "ADV-2010-0764",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0764"
          },
          {
            "name": "ADV-2010-0765",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0765"
          },
          {
            "name": "MDVSA-2010:070",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
          },
          {
            "name": "FEDORA-2010-5526",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
          },
          {
            "name": "38566",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38566"
          },
          {
            "name": "39117",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39117"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html"
          },
          {
            "name": "39243",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39243"
          },
          {
            "name": "ADV-2010-0748",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0748"
          },
          {
            "name": "ADV-2010-0849",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0849"
          },
          {
            "name": "FEDORA-2010-5539",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
          },
          {
            "name": "ADV-2010-0790",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0790"
          },
          {
            "name": "39242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39242"
          },
          {
            "name": "DSA-2027",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2027"
          },
          {
            "name": "RHSA-2010:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
          },
          {
            "name": "39240",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39240"
          },
          {
            "name": "1023775",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023775"
          },
          {
            "name": "39204",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:7615",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7615"
        },
        {
          "name": "oval:org.mitre.oval:def:9502",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9502"
        },
        {
          "name": "39397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39397"
        },
        {
          "name": "RHSA-2010:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
        },
        {
          "name": "39308",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39308"
        },
        {
          "name": "mozilla-browser-eng-code-exec(57389)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57389"
        },
        {
          "name": "39136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39136"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=546530"
        },
        {
          "name": "ADV-2010-0781",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0781"
        },
        {
          "name": "FEDORA-2010-5561",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
        },
        {
          "name": "USN-921-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-921-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=499844"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "1023781",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023781"
        },
        {
          "name": "ADV-2010-0764",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0764"
        },
        {
          "name": "ADV-2010-0765",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0765"
        },
        {
          "name": "MDVSA-2010:070",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
        },
        {
          "name": "FEDORA-2010-5526",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
        },
        {
          "name": "38566",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38566"
        },
        {
          "name": "39117",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39117"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html"
        },
        {
          "name": "39243",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39243"
        },
        {
          "name": "ADV-2010-0748",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0748"
        },
        {
          "name": "ADV-2010-0849",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0849"
        },
        {
          "name": "FEDORA-2010-5539",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
        },
        {
          "name": "ADV-2010-0790",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0790"
        },
        {
          "name": "39242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39242"
        },
        {
          "name": "DSA-2027",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2027"
        },
        {
          "name": "RHSA-2010:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
        },
        {
          "name": "39240",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39240"
        },
        {
          "name": "1023775",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023775"
        },
        {
          "name": "39204",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0174",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:7615",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7615"
            },
            {
              "name": "oval:org.mitre.oval:def:9502",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9502"
            },
            {
              "name": "39397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39397"
            },
            {
              "name": "RHSA-2010:0333",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
            },
            {
              "name": "39308",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39308"
            },
            {
              "name": "mozilla-browser-eng-code-exec(57389)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57389"
            },
            {
              "name": "39136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39136"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=546530",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=546530"
            },
            {
              "name": "ADV-2010-0781",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0781"
            },
            {
              "name": "FEDORA-2010-5561",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
            },
            {
              "name": "USN-921-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-921-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=499844",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=499844"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "1023781",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023781"
            },
            {
              "name": "ADV-2010-0764",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0764"
            },
            {
              "name": "ADV-2010-0765",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0765"
            },
            {
              "name": "MDVSA-2010:070",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
            },
            {
              "name": "FEDORA-2010-5526",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
            },
            {
              "name": "38566",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38566"
            },
            {
              "name": "39117",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39117"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html"
            },
            {
              "name": "39243",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39243"
            },
            {
              "name": "ADV-2010-0748",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0748"
            },
            {
              "name": "ADV-2010-0849",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0849"
            },
            {
              "name": "FEDORA-2010-5539",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
            },
            {
              "name": "ADV-2010-0790",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0790"
            },
            {
              "name": "39242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39242"
            },
            {
              "name": "DSA-2027",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2027"
            },
            {
              "name": "RHSA-2010:0332",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
            },
            {
              "name": "39240",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39240"
            },
            {
              "name": "1023775",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023775"
            },
            {
              "name": "39204",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0174",
    "datePublished": "2010-04-05T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1197

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186	vdb-entry, signature, x_refsource_OVAL
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=537120	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/41103	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59667	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-32.html	x_refsource_CONFIRM
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.666Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "oval:org.mitre.oval:def:14186",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "oval:org.mitre.oval:def:10168",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "41103",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41103"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "firefox-contentdisposition-security-bypass(59667)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59667"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both \"Content-Disposition: attachment\" and \"Content-Type: multipart\" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "oval:org.mitre.oval:def:14186",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "oval:org.mitre.oval:def:10168",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "41103",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41103"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "firefox-contentdisposition-security-bypass(59667)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59667"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1197",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both \"Content-Disposition: attachment\" and \"Content-Type: multipart\" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "oval:org.mitre.oval:def:14186",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "oval:org.mitre.oval:def:10168",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=537120"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "41103",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41103"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "firefox-contentdisposition-security-bypass(59667)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59667"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-32.html"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1197",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1200

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=553938	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=484890	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=551233	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=551661	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59659	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/41090	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=534768	x_refsource_CONFIRM
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=509839	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-26.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=531176	x_refsource_CONFIRM
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "firefox-seamonkey-browser-code-exec(59659)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59659"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "oval:org.mitre.oval:def:14326",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326"
          },
          {
            "name": "41090",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41090"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839"
          },
          {
            "name": "oval:org.mitre.oval:def:10816",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "firefox-seamonkey-browser-code-exec(59659)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59659"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "oval:org.mitre.oval:def:14326",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326"
        },
        {
          "name": "41090",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41090"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839"
        },
        {
          "name": "oval:org.mitre.oval:def:10816",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1200",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=553938"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=484890"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551233"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=551661"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "firefox-seamonkey-browser-code-exec(59659)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59659"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "oval:org.mitre.oval:def:14326",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326"
            },
            {
              "name": "41090",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41090"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534768"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509839"
            },
            {
              "name": "oval:org.mitre.oval:def:10816",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-26.html"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531176"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1200",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-2753

Vulnerability from cvelistv5

Published

2010-07-30 20:00

Modified

2024-08-07 02:46

Severity ?

Summary

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=571106	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.mozilla.org/security/announce/2010/mfsa2010-40.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10958	vdb-entry, signature, x_refsource_OVAL
	http://www.zerodayinitiative.com/advisories/ZDI-10-131/	x_refsource_MISC
	http://www.securityfocus.com/bid/41853	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/512510	mailing-list, x_refsource_BUGTRAQ

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:46:48.173Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=571106"
          },
          {
            "name": "SUSE-SA:2010:049",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-40.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10958",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10958"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-131/"
          },
          {
            "name": "41853",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41853"
          },
          {
            "name": "20100721 ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/512510"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-07-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=571106"
        },
        {
          "name": "SUSE-SA:2010:049",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-40.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10958",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10958"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-131/"
        },
        {
          "name": "41853",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41853"
        },
        {
          "name": "20100721 ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/512510"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-2753",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=571106",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=571106"
            },
            {
              "name": "SUSE-SA:2010:049",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-40.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-40.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10958",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10958"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-10-131/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-131/"
            },
            {
              "name": "41853",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41853"
            },
            {
              "name": "20100721 ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/512510"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-2753",
    "datePublished": "2010-07-30T20:00:00",
    "dateReserved": "2010-07-14T00:00:00",
    "dateUpdated": "2024-08-07T02:46:48.173Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0175

Vulnerability from cvelistv5

Published

2010-04-05 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=375928	x_refsource_CONFIRM
	http://secunia.com/advisories/39397	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0333.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39308	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39136	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0781	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html	vendor-advisory, x_refsource_FEDORA
	http://ubuntu.com/usn/usn-921-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2010/mfsa2010-17.html	x_refsource_CONFIRM
	http://securitytracker.com/id?1023782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2010/0764	vdb-entry, x_refsource_VUPEN
	http://www.zerodayinitiative.com/advisories/ZDI-10-050	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546	vdb-entry, signature, x_refsource_OVAL
	http://securitytracker.com/id?1023780	vdb-entry, x_refsource_SECTRACK
	https://exchange.xforce.ibmcloud.com/vulnerabilities/57390	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/0765	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:070	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/archive/1/510542/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38566	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39117	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39243	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0748	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0849	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2010/0790	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/39242	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2010/dsa-2027	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0332.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39240	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39204	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=540100	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.227Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=375928"
          },
          {
            "name": "39397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39397"
          },
          {
            "name": "RHSA-2010:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
          },
          {
            "name": "39308",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39308"
          },
          {
            "name": "39136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39136"
          },
          {
            "name": "ADV-2010-0781",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0781"
          },
          {
            "name": "FEDORA-2010-5561",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
          },
          {
            "name": "USN-921-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-921-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-17.html"
          },
          {
            "name": "1023782",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023782"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "ADV-2010-0764",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0764"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-050"
          },
          {
            "name": "oval:org.mitre.oval:def:7546",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546"
          },
          {
            "name": "1023780",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023780"
          },
          {
            "name": "firefox-nstreeselection-code-execution(57390)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57390"
          },
          {
            "name": "ADV-2010-0765",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0765"
          },
          {
            "name": "MDVSA-2010:070",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
          },
          {
            "name": "20100402 ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/510542/100/0/threaded"
          },
          {
            "name": "FEDORA-2010-5526",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9834",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834"
          },
          {
            "name": "38566",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38566"
          },
          {
            "name": "39117",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39117"
          },
          {
            "name": "39243",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39243"
          },
          {
            "name": "ADV-2010-0748",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0748"
          },
          {
            "name": "ADV-2010-0849",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0849"
          },
          {
            "name": "FEDORA-2010-5539",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
          },
          {
            "name": "ADV-2010-0790",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0790"
          },
          {
            "name": "39242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39242"
          },
          {
            "name": "DSA-2027",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2027"
          },
          {
            "name": "RHSA-2010:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
          },
          {
            "name": "39240",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39240"
          },
          {
            "name": "39204",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39204"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=540100"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=375928"
        },
        {
          "name": "39397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39397"
        },
        {
          "name": "RHSA-2010:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
        },
        {
          "name": "39308",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39308"
        },
        {
          "name": "39136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39136"
        },
        {
          "name": "ADV-2010-0781",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0781"
        },
        {
          "name": "FEDORA-2010-5561",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
        },
        {
          "name": "USN-921-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-921-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-17.html"
        },
        {
          "name": "1023782",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023782"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "ADV-2010-0764",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0764"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-050"
        },
        {
          "name": "oval:org.mitre.oval:def:7546",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546"
        },
        {
          "name": "1023780",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023780"
        },
        {
          "name": "firefox-nstreeselection-code-execution(57390)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57390"
        },
        {
          "name": "ADV-2010-0765",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0765"
        },
        {
          "name": "MDVSA-2010:070",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
        },
        {
          "name": "20100402 ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/510542/100/0/threaded"
        },
        {
          "name": "FEDORA-2010-5526",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9834",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834"
        },
        {
          "name": "38566",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38566"
        },
        {
          "name": "39117",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39117"
        },
        {
          "name": "39243",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39243"
        },
        {
          "name": "ADV-2010-0748",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0748"
        },
        {
          "name": "ADV-2010-0849",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0849"
        },
        {
          "name": "FEDORA-2010-5539",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
        },
        {
          "name": "ADV-2010-0790",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0790"
        },
        {
          "name": "39242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39242"
        },
        {
          "name": "DSA-2027",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2027"
        },
        {
          "name": "RHSA-2010:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
        },
        {
          "name": "39240",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39240"
        },
        {
          "name": "39204",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39204"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=540100"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0175",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=375928",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=375928"
            },
            {
              "name": "39397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39397"
            },
            {
              "name": "RHSA-2010:0333",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
            },
            {
              "name": "39308",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39308"
            },
            {
              "name": "39136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39136"
            },
            {
              "name": "ADV-2010-0781",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0781"
            },
            {
              "name": "FEDORA-2010-5561",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html"
            },
            {
              "name": "USN-921-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-921-1"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-17.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-17.html"
            },
            {
              "name": "1023782",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023782"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "ADV-2010-0764",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0764"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-10-050",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-050"
            },
            {
              "name": "oval:org.mitre.oval:def:7546",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546"
            },
            {
              "name": "1023780",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023780"
            },
            {
              "name": "firefox-nstreeselection-code-execution(57390)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57390"
            },
            {
              "name": "ADV-2010-0765",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0765"
            },
            {
              "name": "MDVSA-2010:070",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
            },
            {
              "name": "20100402 ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/510542/100/0/threaded"
            },
            {
              "name": "FEDORA-2010-5526",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html"
            },
            {
              "name": "oval:org.mitre.oval:def:9834",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834"
            },
            {
              "name": "38566",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38566"
            },
            {
              "name": "39117",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39117"
            },
            {
              "name": "39243",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39243"
            },
            {
              "name": "ADV-2010-0748",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0748"
            },
            {
              "name": "ADV-2010-0849",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0849"
            },
            {
              "name": "FEDORA-2010-5539",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html"
            },
            {
              "name": "ADV-2010-0790",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0790"
            },
            {
              "name": "39242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39242"
            },
            {
              "name": "DSA-2027",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2027"
            },
            {
              "name": "RHSA-2010:0332",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
            },
            {
              "name": "39240",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39240"
            },
            {
              "name": "39204",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39204"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=540100",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=540100"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0175",
    "datePublished": "2010-04-05T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0177

Vulnerability from cvelistv5

Published

2010-04-05 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/510540/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/39397	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0333.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39308	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39136	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/57393	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2010/0781	vdb-entry, x_refsource_VUPEN
	http://ubuntu.com/usn/usn-921-1	vendor-advisory, x_refsource_UBUNTU
	http://securitytracker.com/id?1023776	vdb-entry, x_refsource_SECTRACK
	http://www.mozilla.org/security/announce/2010/mfsa2010-19.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7622	vdb-entry, signature, x_refsource_OVAL
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.vupen.com/english/advisories/2010/0764	vdb-entry, x_refsource_VUPEN
	http://www.zerodayinitiative.com/advisories/ZDI-10-049	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=538310	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0765	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:070	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/38566	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10833	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/39117	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/39243	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0748	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0849	vdb-entry, x_refsource_VUPEN
	http://www.debian.org/security/2010/dsa-2027	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0332.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39240	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20100402 ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/510540/100/0/threaded"
          },
          {
            "name": "39397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39397"
          },
          {
            "name": "RHSA-2010:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
          },
          {
            "name": "39308",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39308"
          },
          {
            "name": "39136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39136"
          },
          {
            "name": "firefox-nspluginarray-code-execution(57393)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57393"
          },
          {
            "name": "ADV-2010-0781",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0781"
          },
          {
            "name": "USN-921-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-921-1"
          },
          {
            "name": "1023776",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023776"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-19.html"
          },
          {
            "name": "oval:org.mitre.oval:def:7622",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7622"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "ADV-2010-0764",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0764"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-049"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=538310"
          },
          {
            "name": "ADV-2010-0765",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0765"
          },
          {
            "name": "MDVSA-2010:070",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
          },
          {
            "name": "38566",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38566"
          },
          {
            "name": "oval:org.mitre.oval:def:10833",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10833"
          },
          {
            "name": "39117",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39117"
          },
          {
            "name": "39243",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39243"
          },
          {
            "name": "ADV-2010-0748",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0748"
          },
          {
            "name": "ADV-2010-0849",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0849"
          },
          {
            "name": "DSA-2027",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2027"
          },
          {
            "name": "RHSA-2010:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
          },
          {
            "name": "39240",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39240"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a \"dangling pointer vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20100402 ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/510540/100/0/threaded"
        },
        {
          "name": "39397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39397"
        },
        {
          "name": "RHSA-2010:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
        },
        {
          "name": "39308",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39308"
        },
        {
          "name": "39136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39136"
        },
        {
          "name": "firefox-nspluginarray-code-execution(57393)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57393"
        },
        {
          "name": "ADV-2010-0781",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0781"
        },
        {
          "name": "USN-921-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-921-1"
        },
        {
          "name": "1023776",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023776"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-19.html"
        },
        {
          "name": "oval:org.mitre.oval:def:7622",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7622"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "ADV-2010-0764",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0764"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-049"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=538310"
        },
        {
          "name": "ADV-2010-0765",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0765"
        },
        {
          "name": "MDVSA-2010:070",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
        },
        {
          "name": "38566",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38566"
        },
        {
          "name": "oval:org.mitre.oval:def:10833",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10833"
        },
        {
          "name": "39117",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39117"
        },
        {
          "name": "39243",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39243"
        },
        {
          "name": "ADV-2010-0748",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0748"
        },
        {
          "name": "ADV-2010-0849",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0849"
        },
        {
          "name": "DSA-2027",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2027"
        },
        {
          "name": "RHSA-2010:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
        },
        {
          "name": "39240",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39240"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0177",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a \"dangling pointer vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20100402 ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/510540/100/0/threaded"
            },
            {
              "name": "39397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39397"
            },
            {
              "name": "RHSA-2010:0333",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0333.html"
            },
            {
              "name": "39308",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39308"
            },
            {
              "name": "39136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39136"
            },
            {
              "name": "firefox-nspluginarray-code-execution(57393)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57393"
            },
            {
              "name": "ADV-2010-0781",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0781"
            },
            {
              "name": "USN-921-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-921-1"
            },
            {
              "name": "1023776",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023776"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-19.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-19.html"
            },
            {
              "name": "oval:org.mitre.oval:def:7622",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7622"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "ADV-2010-0764",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0764"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-10-049",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-049"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=538310",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=538310"
            },
            {
              "name": "ADV-2010-0765",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0765"
            },
            {
              "name": "MDVSA-2010:070",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070"
            },
            {
              "name": "38566",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38566"
            },
            {
              "name": "oval:org.mitre.oval:def:10833",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10833"
            },
            {
              "name": "39117",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39117"
            },
            {
              "name": "39243",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39243"
            },
            {
              "name": "ADV-2010-0748",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0748"
            },
            {
              "name": "ADV-2010-0849",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0849"
            },
            {
              "name": "DSA-2027",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2027"
            },
            {
              "name": "RHSA-2010:0332",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0332.html"
            },
            {
              "name": "39240",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39240"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0177",
    "datePublished": "2010-04-05T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-1199

Vulnerability from cvelistv5

Published

2010-06-23 18:00

Modified

2024-08-07 01:14

Severity ?

Summary

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

References

▼	URL	Tags
	https://exchange.xforce.ibmcloud.com/vulnerabilities/59666	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/40481	third-party-advisory, x_refsource_SECUNIA
	http://ubuntu.com/usn/usn-930-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287	vdb-entry, signature, x_refsource_OVAL
	http://www.exploit-db.com/exploits/14949	exploit, x_refsource_EXPLOIT-DB
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id?1024138	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2010/1640	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41050	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0501.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1557	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2010/1773	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=554255	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/1592	vdb-entry, x_refsource_VUPEN
	http://www.ubuntu.com/usn/usn-930-2	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/1551	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/bid/41082	vdb-entry, x_refsource_BID
	http://www.redhat.com/support/errata/RHSA-2010-0500.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/511972/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.zerodayinitiative.com/advisories/ZDI-10-113	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/40323	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2010/mfsa2010-30.html	x_refsource_CONFIRM
	http://secunia.com/advisories/40401	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/40326	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/css/P8/documents/100091069	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1024139	vdb-entry, x_refsource_SECTRACK

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.668Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "firefox-xslt-node-code-execution(59666)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59666"
          },
          {
            "name": "40481",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40481"
          },
          {
            "name": "USN-930-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-930-1"
          },
          {
            "name": "oval:org.mitre.oval:def:13287",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287"
          },
          {
            "name": "14949",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/14949"
          },
          {
            "name": "FEDORA-2010-10361",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
          },
          {
            "name": "1024138",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024138"
          },
          {
            "name": "ADV-2010-1640",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1640"
          },
          {
            "name": "41050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41050"
          },
          {
            "name": "RHSA-2010:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
          },
          {
            "name": "ADV-2010-1557",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1557"
          },
          {
            "name": "MDVSA-2010:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
          },
          {
            "name": "ADV-2010-1773",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1773"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "ADV-2010-1592",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1592"
          },
          {
            "name": "USN-930-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-930-2"
          },
          {
            "name": "ADV-2010-1551",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1551"
          },
          {
            "name": "41082",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41082"
          },
          {
            "name": "RHSA-2010:0500",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
          },
          {
            "name": "SUSE-SA:2010:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
          },
          {
            "name": "20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/511972/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-113"
          },
          {
            "name": "oval:org.mitre.oval:def:10885",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885"
          },
          {
            "name": "40323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40323"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html"
          },
          {
            "name": "40401",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40401"
          },
          {
            "name": "FEDORA-2010-10344",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
          },
          {
            "name": "40326",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/40326"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/css/P8/documents/100091069"
          },
          {
            "name": "1024139",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1024139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "firefox-xslt-node-code-execution(59666)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59666"
        },
        {
          "name": "40481",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40481"
        },
        {
          "name": "USN-930-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-930-1"
        },
        {
          "name": "oval:org.mitre.oval:def:13287",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287"
        },
        {
          "name": "14949",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/14949"
        },
        {
          "name": "FEDORA-2010-10361",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
        },
        {
          "name": "1024138",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024138"
        },
        {
          "name": "ADV-2010-1640",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1640"
        },
        {
          "name": "41050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41050"
        },
        {
          "name": "RHSA-2010:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
        },
        {
          "name": "ADV-2010-1557",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1557"
        },
        {
          "name": "MDVSA-2010:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
        },
        {
          "name": "ADV-2010-1773",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1773"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "ADV-2010-1592",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1592"
        },
        {
          "name": "USN-930-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-930-2"
        },
        {
          "name": "ADV-2010-1551",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1551"
        },
        {
          "name": "41082",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/41082"
        },
        {
          "name": "RHSA-2010:0500",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
        },
        {
          "name": "SUSE-SA:2010:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
        },
        {
          "name": "20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/511972/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-113"
        },
        {
          "name": "oval:org.mitre.oval:def:10885",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885"
        },
        {
          "name": "40323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40323"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html"
        },
        {
          "name": "40401",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40401"
        },
        {
          "name": "FEDORA-2010-10344",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
        },
        {
          "name": "40326",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/40326"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/css/P8/documents/100091069"
        },
        {
          "name": "1024139",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1024139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1199",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "firefox-xslt-node-code-execution(59666)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59666"
            },
            {
              "name": "40481",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40481"
            },
            {
              "name": "USN-930-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-930-1"
            },
            {
              "name": "oval:org.mitre.oval:def:13287",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287"
            },
            {
              "name": "14949",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/14949"
            },
            {
              "name": "FEDORA-2010-10361",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html"
            },
            {
              "name": "1024138",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024138"
            },
            {
              "name": "ADV-2010-1640",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1640"
            },
            {
              "name": "41050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41050"
            },
            {
              "name": "RHSA-2010:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0501.html"
            },
            {
              "name": "ADV-2010-1557",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1557"
            },
            {
              "name": "MDVSA-2010:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:125"
            },
            {
              "name": "ADV-2010-1773",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1773"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=554255"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "ADV-2010-1592",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1592"
            },
            {
              "name": "USN-930-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-930-2"
            },
            {
              "name": "ADV-2010-1551",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1551"
            },
            {
              "name": "41082",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/41082"
            },
            {
              "name": "RHSA-2010:0500",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0500.html"
            },
            {
              "name": "SUSE-SA:2010:030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html"
            },
            {
              "name": "20100623 ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/511972/100/0/threaded"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-10-113",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-113"
            },
            {
              "name": "oval:org.mitre.oval:def:10885",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885"
            },
            {
              "name": "40323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40323"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-30.html"
            },
            {
              "name": "40401",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40401"
            },
            {
              "name": "FEDORA-2010-10344",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html"
            },
            {
              "name": "40326",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/40326"
            },
            {
              "name": "http://support.avaya.com/css/P8/documents/100091069",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/css/P8/documents/100091069"
            },
            {
              "name": "1024139",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1024139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1199",
    "datePublished": "2010-06-23T18:00:00",
    "dateReserved": "2010-03-30T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature