CVE-2010-3179

Mozilla Firefox <3.5.14 & <3.6.11 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Alexander Miller · htmlremotelinux

https://www.exploit-db.com/exploits/34881

View Code ZIP pw:eip

References (17)

[Vendor Advisory] http://www.ubuntu.com/usn/USN-997-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-998-1

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2010:210

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2010:211

[Vendor Advisory] http://support.avaya.com/css/P8/documents/100120156

[Various Sources] http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

[Third Party Advisory] http://secunia.com/advisories/42867

[Vendor Advisory] http://www.mozilla.org/security/announce/2010/mfsa2010-65.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2010-0782.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2010-0861.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2010-0896.html

[Issue Tracking] https://bugzilla.mozilla.org/show_bug.cgi?id=583077

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11675

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html

[Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html

[Third Party Advisory] http://www.debian.org/security/2010/dsa-2124

[Third Party Advisory] http://www.vupen.com/english/advisories/2011/0061

Scores

EPSS 0.2255

EPSS Percentile 95.9%

Details

CWE

CWE-119

Status published

Products (47)

mozilla/firefox 3.6

mozilla/firefox 3.6.2

mozilla/firefox 3.6.3

mozilla/firefox 3.6.4

mozilla/firefox 3.6.6

mozilla/firefox 3.6.7

mozilla/firefox 3.6.8

mozilla/firefox 3.6.9

mozilla/firefox 3.6.10

mozilla/firefox 1.0 (2 CPE variants)

... and 37 more

Published Oct 21, 2010

Tracked Since Feb 18, 2026