Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-2752

Date: July 30, 2010

Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.

Severity Score

Related Resources (10)

https://access.redhat.com/security/cve/CVE-2010-2752
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11680
https://people.canonical.com/~ubuntu-security/cve/CVE-2010-2752
http://www.securityfocus.com/bid/41852
https://nvd.nist.gov/vuln/detail/CVE-2010-2752
http://www.mozilla.org/security/announce/2010/mfsa2010-39.html
http://www.securityfocus.com/archive/1/512514
https://bugzilla.mozilla.org/show_bug.cgi?id=574059
http://www.zerodayinitiative.com/advisories/ZDI-10-133/
https://www.mend.io/vulnerability-database/CVE-2010-2752

Severity Score

Weakness Type (CWE)

Numeric Errors

CWE-189

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us