CVE-2010-3179
NoneCVSS
—
EPSS
10.1%
Published
Oct 21, 2010
CISA due date
—
The record
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:5.0 | xulrunner | 0 | 1.9.0.19-6 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::as | nss | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::as | nss-debuginfo | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::as | nss-devel | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::as | nss-tools | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::desktop | nss | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::desktop | nss-debuginfo | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::desktop | nss-devel | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::desktop | nss-tools | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::es | nss | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::es | nss-debuginfo | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::es | nss-devel | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::es | nss-tools | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:3.6.11-2.el4 |
| Red Hat:enterprise_linux:4::ws | nss | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::ws | nss-debuginfo | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::ws | nss-devel | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:4::ws | nss-tools | 0 | 0:3.12.8-1.el4 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:3.6.11-2.el5 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:3.6.11-2.el5 |
| Red Hat:enterprise_linux:5::client | nss | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client | nss-debuginfo | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client | nss-devel | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client | nss-pkcs11-devel | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client | nss-tools | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client | xulrunner | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::client | xulrunner-debuginfo | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::client | xulrunner-devel | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | nss | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | nss-debuginfo | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | nss-devel | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | nss-pkcs11-devel | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | nss-tools | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-debuginfo | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-devel | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:3.6.11-2.el5 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:3.6.11-2.el5 |
| Red Hat:enterprise_linux:5::server | nss | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::server | nss-debuginfo | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::server | nss-devel | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::server | nss-pkcs11-devel | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::server | nss-tools | 0 | 0:3.12.8-1.el5 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:1.9.2.11-2.el5 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:3.1.6-1.el6_0 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:3.1.6-1.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:3.1.6-1.el6_0 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:3.1.6-1.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:3.6.12-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:3.1.6-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:3.1.6-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:1.9.2.12-1.el6_0 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:1.9.2.12-1.el6_0 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects xulrunner
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects xulrunner
- CVE-2010-1205 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… Also affects xulrunner
- CVE-2010-1199 Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before… Also affects xulrunner
- CVE-2010-0167 The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x… Also affects xulrunner
- CVE-2009-3382 layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x… Also affects xulrunner
- CVE-2009-3373 Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and… Also affects xulrunner
- CVE-2009-2464 The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before… Also affects xulrunner