Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-1208

Date: July 30, 2010

Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.

Severity Score

Related Resources (10)

http://www.securityfocus.com/bid/41849
https://nvd.nist.gov/vuln/detail/CVE-2010-1208
http://www.mozilla.org/security/announce/2010/mfsa2010-35.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11740
https://access.redhat.com/security/cve/CVE-2010-1208
http://www.zerodayinitiative.com/advisories/ZDI-10-134/
http://www.securityfocus.com/archive/1/512515
https://bugzilla.mozilla.org/show_bug.cgi?id=572986
https://people.canonical.com/~ubuntu-security/cve/CVE-2010-1208
https://www.mend.io/vulnerability-database/CVE-2010-1208

Severity Score

Weakness Type (CWE)

Resource Management Errors

CWE-399

Use After Free

CWE-416

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us