Vulnerability CVE-2010-1199


Published: 2010-06-24   Modified: 2012-02-13

Description:
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

See advisories in our WLB2 database:
Topic
Author
Date
High
Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
Abysssec
13.09.2010

Type:

CWE-189

(Numeric Errors)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Mozilla -> Firefox 
Mozilla -> Seamonkey 
Mozilla -> Thunderbird 

 References:
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html
http://support.avaya.com/css/P8/documents/100091069
http://ubuntu.com/usn/usn-930-1
http://www.exploit-db.com/exploits/14949
http://www.mandriva.com/security/advisories?name=MDVSA-2010:125
http://www.mozilla.org/security/announce/2010/mfsa2010-30.html
http://www.redhat.com/support/errata/RHSA-2010-0499.html
http://www.redhat.com/support/errata/RHSA-2010-0500.html
http://www.redhat.com/support/errata/RHSA-2010-0501.html
http://www.securityfocus.com/archive/1/511972/100/0/threaded
http://www.securityfocus.com/bid/41050
http://www.securityfocus.com/bid/41082
http://www.securitytracker.com/id?1024138
http://www.securitytracker.com/id?1024139
http://www.ubuntu.com/usn/usn-930-2
http://www.vupen.com/english/advisories/2010/1551
http://www.vupen.com/english/advisories/2010/1556
http://www.vupen.com/english/advisories/2010/1557
http://www.vupen.com/english/advisories/2010/1592
http://www.vupen.com/english/advisories/2010/1640
http://www.vupen.com/english/advisories/2010/1773
http://www.zerodayinitiative.com/advisories/ZDI-10-113
https://bugzilla.mozilla.org/show_bug.cgi?id=554255
https://exchange.xforce.ibmcloud.com/vulnerabilities/59666
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287

Copyright 2024, cxsecurity.com

 

Back to Top