CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3765

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.876

EPSS Ranking 99.4%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2010-3765

Mozilla » Firefox » Version: 3.5

cpe:2.3:a:mozilla:firefox:3.5
Mozilla » Firefox » Version: 3.5.1

cpe:2.3:a:mozilla:firefox:3.5.1
Mozilla » Firefox » Version: 3.5.10

cpe:2.3:a:mozilla:firefox:3.5.10
Mozilla » Firefox » Version: 3.5.11

cpe:2.3:a:mozilla:firefox:3.5.11
Mozilla » Firefox » Version: 3.5.12

cpe:2.3:a:mozilla:firefox:3.5.12
Mozilla » Firefox » Version: 3.5.13

cpe:2.3:a:mozilla:firefox:3.5.13
Mozilla » Firefox » Version: 3.5.14

cpe:2.3:a:mozilla:firefox:3.5.14
Mozilla » Firefox » Version: 3.5.2

cpe:2.3:a:mozilla:firefox:3.5.2
Mozilla » Firefox » Version: 3.5.3

cpe:2.3:a:mozilla:firefox:3.5.3
Mozilla » Firefox » Version: 3.5.4

cpe:2.3:a:mozilla:firefox:3.5.4
Mozilla » Firefox » Version: 3.5.5

cpe:2.3:a:mozilla:firefox:3.5.5
Mozilla » Firefox » Version: 3.5.6

cpe:2.3:a:mozilla:firefox:3.5.6
Mozilla » Firefox » Version: 3.5.7

cpe:2.3:a:mozilla:firefox:3.5.7
Mozilla » Firefox » Version: 3.5.8

cpe:2.3:a:mozilla:firefox:3.5.8
Mozilla » Firefox » Version: 3.5.9

cpe:2.3:a:mozilla:firefox:3.5.9
Mozilla » Firefox » Version: 3.6

cpe:2.3:a:mozilla:firefox:3.6
Mozilla » Firefox » Version: 3.6.10

cpe:2.3:a:mozilla:firefox:3.6.10
Mozilla » Firefox » Version: 3.6.11

cpe:2.3:a:mozilla:firefox:3.6.11
Mozilla » Firefox » Version: 3.6.2

cpe:2.3:a:mozilla:firefox:3.6.2
Mozilla » Firefox » Version: 3.6.3

cpe:2.3:a:mozilla:firefox:3.6.3
Mozilla » Firefox » Version: 3.6.4

cpe:2.3:a:mozilla:firefox:3.6.4
Mozilla » Firefox » Version: 3.6.6

cpe:2.3:a:mozilla:firefox:3.6.6
Mozilla » Firefox » Version: 3.6.7

cpe:2.3:a:mozilla:firefox:3.6.7
Mozilla » Firefox » Version: 3.6.8

cpe:2.3:a:mozilla:firefox:3.6.8
Mozilla » Firefox » Version: 3.6.9

cpe:2.3:a:mozilla:firefox:3.6.9
Mozilla » Seamonkey » Version: 2.0

cpe:2.3:a:mozilla:seamonkey:2.0
Mozilla » Seamonkey » Version: 2.0.1

cpe:2.3:a:mozilla:seamonkey:2.0.1
Mozilla » Seamonkey » Version: 2.0.2

cpe:2.3:a:mozilla:seamonkey:2.0.2
Mozilla » Seamonkey » Version: 2.0.3

cpe:2.3:a:mozilla:seamonkey:2.0.3
Mozilla » Seamonkey » Version: 2.0.4

cpe:2.3:a:mozilla:seamonkey:2.0.4
Mozilla » Seamonkey » Version: 2.0.5

cpe:2.3:a:mozilla:seamonkey:2.0.5
Mozilla » Seamonkey » Version: 2.0.6

cpe:2.3:a:mozilla:seamonkey:2.0.6
Mozilla » Seamonkey » Version: 2.0.7

cpe:2.3:a:mozilla:seamonkey:2.0.7
Mozilla » Seamonkey » Version: 2.0.8

cpe:2.3:a:mozilla:seamonkey:2.0.8
Mozilla » Seamonkey » Version: 2.0.9

cpe:2.3:a:mozilla:seamonkey:2.0.9
Mozilla » Thunderbird » Version: 3.0.1

cpe:2.3:a:mozilla:thunderbird:3.0.1
Mozilla » Thunderbird » Version: 3.0.2

cpe:2.3:a:mozilla:thunderbird:3.0.2
Mozilla » Thunderbird » Version: 3.0.3

cpe:2.3:a:mozilla:thunderbird:3.0.3
Mozilla » Thunderbird » Version: 3.0.4

cpe:2.3:a:mozilla:thunderbird:3.0.4
Mozilla » Thunderbird » Version: 3.0.5

cpe:2.3:a:mozilla:thunderbird:3.0.5
Mozilla » Thunderbird » Version: 3.0.6

cpe:2.3:a:mozilla:thunderbird:3.0.6
Mozilla » Thunderbird » Version: 3.0.7

cpe:2.3:a:mozilla:thunderbird:3.0.7
Mozilla » Thunderbird » Version: 3.0.8

cpe:2.3:a:mozilla:thunderbird:3.0.8
Mozilla » Thunderbird » Version: 3.0.9

cpe:2.3:a:mozilla:thunderbird:3.0.9
Mozilla » Thunderbird » Version: 3.1.1

cpe:2.3:a:mozilla:thunderbird:3.1.1
Mozilla » Thunderbird » Version: 3.1.2

cpe:2.3:a:mozilla:thunderbird:3.1.2
Mozilla » Thunderbird » Version: 3.1.3

cpe:2.3:a:mozilla:thunderbird:3.1.3
Mozilla » Thunderbird » Version: 3.1.4

cpe:2.3:a:mozilla:thunderbird:3.1.4
Mozilla » Thunderbird » Version: 3.1.5

cpe:2.3:a:mozilla:thunderbird:3.1.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3765

Products

Pricing

Contact Us