CVE-2010-3765
CRITICAL KEVMozilla Firefox 3.5.x-3.5.14 and 3.6.x-3.6.11 - Remote Code Execution via nsCSSFrameConstructor
Title source: llmExploitation Summary
CVE-2010-3765 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 6, 2025.
EIP tracks 5 public exploits from researchers including Metasploit, anonymous, extraexploit, including a Metasploit module exploits/windows/browser/mozilla_interleaved_write.
AI-analyzed exploit summary This Metasploit module exploits CVE-2010-3765, a vulnerability in Mozilla Firefox 3.6.8-3.6.11 caused by interleaved calls to document.write and appendChild, leading to remote code execution.
Description
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
Exploits (5)
This Metasploit module exploits CVE-2010-3765, a vulnerability in Mozilla Firefox 3.6.8-3.6.11 caused by interleaved calls to document.write and appendChild, leading to remote code execution.
This exploit targets a memory corruption vulnerability in Firefox 3.6.x (CVE-2010-3765) via a heap spray technique. It uses JavaScript to trigger the vulnerability and execute shellcode, achieving remote code execution.
This is a proof-of-concept exploit for CVE-2010-3765, which targets a use-after-free vulnerability in Microsoft Internet Explorer. The exploit manipulates DOM elements to trigger a crash, demonstrating the vulnerability.
This exploit triggers a denial-of-service (DoS) condition in Mozilla Firefox by exhausting memory through rapid DOM element creation and attribute enumeration. The crashme() function iteratively generates HTML elements with attributes, leading to a browser crash.
This Metasploit module exploits a memory corruption vulnerability in Mozilla Firefox (CVE-2010-3765) by interleaving calls to document.write and appendChild, leading to arbitrary code execution. It includes version-specific ROP chains and shellcode for Firefox 3.6.8-3.6.11 on Windows XP/Server 2003.
References (52)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H