ByteOS Network

NVD Vulnerability Details :

CVE-2010-1198

Deferred

Source-cve@mitre.org

Published At-24 Jun, 2010 | 12:30

Updated At-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Mozilla Corporation

>>firefox>>3.5

cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.1

cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.2

cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.3

cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.4

cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.5

cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.6

cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.7

cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*

Mozilla Corporation

>>firefox>>3.5.9

cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>Versions up to 2.0.4(inclusive)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0

cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0

cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0

cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1

cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1

cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1

cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.2

cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.3

cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.4

cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.5

cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.6

cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.7

cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.8

cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.9

cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.10

cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.11

cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.12

cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.13

cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.14

cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.15

cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.16

cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.17

cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.18

cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>1.1.19

cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.0

cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	cve@mitre.org	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	cve@mitre.org	N/A
http://secunia.com/advisories/40326	cve@mitre.org	N/A
http://secunia.com/advisories/40401	cve@mitre.org	N/A
http://secunia.com/advisories/40481	cve@mitre.org	N/A
http://support.avaya.com/css/P8/documents/100091069	cve@mitre.org	N/A
http://ubuntu.com/usn/usn-930-1	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2010/mfsa2010-28.html	cve@mitre.org	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0499.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2010-0500.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2010-0501.html	cve@mitre.org	N/A
http://www.securityfocus.com/bid/41050	cve@mitre.org	N/A
http://www.securityfocus.com/bid/41102	cve@mitre.org	N/A
http://www.securitytracker.com/id?1024138	cve@mitre.org	N/A
http://www.ubuntu.com/usn/usn-930-2	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/1551	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/1556	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/1557	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/1592	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/1640	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/1773	cve@mitre.org	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=532246	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/59664	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176	cve@mitre.org	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/40326	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/40401	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/40481	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.avaya.com/css/P8/documents/100091069	af854a3a-2127-422b-91ae-364da2661108	N/A
http://ubuntu.com/usn/usn-930-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2010:125	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2010/mfsa2010-28.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0499.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2010-0500.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2010-0501.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/41050	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/41102	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1024138	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/usn-930-2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1551	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1556	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1557	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1592	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1640	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1773	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.mozilla.org/show_bug.cgi?id=532246	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/59664	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/40326

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/40401

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/40481

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.avaya.com/css/P8/documents/100091069

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://ubuntu.com/usn/usn-930-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:125

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mozilla.org/security/announce/2010/mfsa2010-28.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0499.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0500.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0501.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/41050

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/41102

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1024138

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/usn-930-2

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1551

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1556

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1557

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1592

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1640

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1773

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=532246

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/59664

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html