CVE-2010-3765

Description

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

87.446

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Mozilla Firefox (x64) 3.6.9	Windows
Multiple vulnerabilities affected in Mozilla Thunderbird 3.1.5	Windows
Multiple vulnerabilities affected in Mozilla_Firefox 3.6.9	Windows
Multiple vulnerabilities affected in SeaMonkey 2.0.9	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.1	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.2	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.3	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.4	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.5	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.6	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.1.1	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.1.2	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.7	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.8	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.0.9	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.1.3	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.1.4	Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 3.1.5	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.1	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.10	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.11	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.12	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.13	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.14	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.2	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.3	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.4	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.5	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.6	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.7	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.8	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.5.9	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.10	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.11	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.2	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.3	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.4	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.6	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.7	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.8	Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.6.9	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.1	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.10	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.11	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.12	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.13	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.14	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.2	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.3	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.4	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.5	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.6	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.7	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.8	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.5.9	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.10	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.11	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.2	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.3	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.4	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.6	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.7	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.8	Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 3.6.9	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-343016	Mozilla Firefox (x64) (132.0.2)
PATCH-315938	Mozilla Thunderbird (68.12.0)
PATCH-343015	Mozilla Firefox (132.0.2)
PATCH-341197	SeaMonkey (2.53.19)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234