Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tory. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000049.html - http://jvn.jp/en/jp/JVN07497935/index.html
CVE ID: CVE-2010-3166 State: PUBLISHED Published: 2010-09-09T18:00:00 Last Updated: 2024-08-07T03:03:17.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12186 - ht
010-10/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12186 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html - http://www.mozilla.org/security/announce/2010/mfsa2010-53.html - http://support.avaya.com/css/P8/documents/100112690 - http://secunia.com/advisories/42867 - http://www.vupen.com/english/advisories/2011/0061 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 - http://www.vupen.com/english/advisories/2010/2323 - https://bugzilla.mozilla.org/show_bug.cgi?id=579655 - http://www.securityfocus.com/bid
om/english/advisories/2010/2323 - https://bugzilla.mozilla.org/show_bug.cgi?id=579655 - http://www.securityfocus.com/bid/43102
CVE ID: CVE-2010-3167 State: PUBLISHED Published: 2010-09-09T18:00:00 Last Updated: 2024-08-07T03:03:17.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html - http://blogs.sun.com/se
iner: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html - http://support.avaya.com/css/P8/documents/100110210 - http://support.avaya.com/css/P8/documents/100112690 - http://secunia.com/advisories/42867 - http://www.mozilla.org/security/announce/2010/mfsa2010-56.html - http://www.zerodayinitiative.com/advisories/ZDI-10-171/ - http://www.vupen.com/english/advisories/2011/0061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61661 - http://www.securityfocus.com/bid/43097 - http://www.
0061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61661 - http://www.securityfocus.com/bid/43097 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 - http://www.vupen.com/english/advisories/2010/2323 - https://bugzilla.mozilla.org/show_bug.cgi?id=576070 - http://www.debian.org/security/2010/dsa-2106 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12136
CVE ID: CVE-2010-3168 State: PUBLISHED Published: 2010-09-09T18:00:00 Last Updated: 2024-08-07T03:03:18.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
tes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12001 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html - http://support.avaya.com/css/P8/documents/100110210 - http://support.avaya.com/css/P8/documents/100112690 - http://secunia.com/advisories/42867 - http://www.vupen.com/english/advisories/2011/0061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61653 - http://www.securityfocus.com/bid/43108 - http://www.mozi
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61653 - http://www.securityfocus.com/bid/43108 - http://www.mozilla.org/security/announce/2010/mfsa2010-55.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 - http://www.vupen.com/english/advisories/2010/2323 - http://www.debian.org/security/2010/dsa-2106 - https://bugzilla.mozilla.org/show_bug.cgi?id=576075
CVE ID: CVE-2010-3169 State: PUBLISHED Published: 2010-09-09T18:00:00 Last Updated: 2024-08-07T03:03:18.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=581784 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.h
://bugzilla.mozilla.org/show_bug.cgi?id=581784 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=583225 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html - http://support.avaya.com/css/P8/documents/100110210 - https://bugzilla.mozilla.org/show_bug.cgi?id=532730 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12145 - http://support.avaya.com/css/P8/documents/100112690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61657 - https://bugzilla.mozilla.org/show
/P8/documents/100112690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61657 - https://bugzilla.mozilla.org/show_bug.cgi?id=564461 - http://secunia.com/advisories/42867 - https://bugzilla.mozilla.org/show_bug.cgi?id=584357 - http://www.vupen.com/english/advisories/2011/0061 - https://bugzilla.mozilla.org/show_bug.cgi?id=572232 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:173 - https://bugzilla.mozilla.org/show_bug.cgi?id=568465 - http://www.vupen.com/english/advisories/2010/2323 - http://www.mozilla.org/security/announce/2010/mfsa2010-49.html - http://www.debian.org/security/2010/dsa-2106 - http://www.securityfocus.com/bid/43118
CVE ID: CVE-2010-3170 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:17.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://www.redha
m Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://www.redhat.com/support/errata/RHSA-2010-0781.html - http://secunia.com/advisories/42867 - http://www.vupen.com/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-1007-1 - http://www.debian.org/security/2010/dsa-2123 - http://support.avaya.com/css/P8/documents/100114250 - https://bugzilla.mozilla.org/show_bug.cgi?id=578697 - http://support.avaya.com/css/P8/documents/1001
cuments/100114250 - https://bugzilla.mozilla.org/show_bug.cgi?id=578697 - http://support.avaya.com/css/P8/documents/100120156 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12254 - http://www.mozilla.org/security/announce/2010/mfsa2010-70.html - http://secunia.com/advisories/41839
CVE ID: CVE-2010-3171 State: PUBLISHED Published: 2010-09-15T19:00:00 Last Updated: 2024-08-07T03:03:18.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random number generator that is seeded only once per document object, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack." NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-5913. Additional Analyst
ion phishing attack." NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-5913. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://secunia.com/advisories/42867 - http://www.vupen.com/english/advisories/2011/0061 - http://www.trusteer.com/sites/default/files/Cross_domain_Math_Random_leakage_in_FF_3.6.4-3.6.8.pdf - https://bugzilla.mozilla.org/show_bug.cgi?id=577512 - http://www.securityfocus.com/bid/43222 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7370 - http://archives.neohapsis.com/archives/bugtraq/2010-09/0117.html
CVE ID: CVE-2010-3172 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:03:17.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html - http://www.vupen.com/english/advisories/2010/2878 - http://www.bugzilla.org/secur
e-announce/2010-November/050813.html - http://www.vupen.com/english/advisories/2010/2878 - http://www.bugzilla.org/security/3.2.8/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html - http://www.securitytracker.com/id?1024683 - https://bugzilla.mozilla.org/show_bug.cgi?id=600464 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://secunia.com/advisories/42271
CVE ID: CVE-2010-3173 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - https://bugzilla.mozilla.org/show_bug.cgi?id=55435
erences: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - https://bugzilla.mozilla.org/show_bug.cgi?id=554354 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - https://bugzilla.mozilla.org/show_bug.cgi?id=583337 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - https://bugzilla.mozilla.org/show_bug.cgi?id=595300 - http://www.redhat.com/support/errata/RHSA-2010-0781.html - http://secunia.com/advisories/42867 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12118 - http://www
es/2011/0061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12118 - http://www.ubuntu.com/usn/USN-1007-1 - http://www.debian.org/security/2010/dsa-2123 - http://support.avaya.com/css/P8/documents/100114250 - http://www.mozilla.org/security/announce/2010/mfsa2010-72.html - http://support.avaya.com/css/P8/documents/100120156 - http://secunia.com/advisories/41839 - https://bugzilla.mozilla.org/show_bug.cgi?id=587234
CVE ID: CVE-2010-3174 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:17.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://www.mozilla.org/security/announce/2010/mfsa2010-64.html - http://www.mandriva.com/security/advisories?
2010:210 - http://www.mozilla.org/security/announce/2010/mfsa2010-64.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.debian.org/security/2010/dsa-2124 - https://bugzilla.mozilla.org/show_bug.cgi?id=476547 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11517
CVE ID: CVE-2010-3175 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 -
//www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://www.securityfocus.com/bid/44245 - https://bugzilla.mozilla.org/show_bug.cgi?id=554670 - http://secunia.com/advisories/42867 - http://www.mozilla.org/security/announce/2010/mfsa2010-64.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - https://bugzilla.mozilla.org/show_bug.cgi?id=590291 - http://www.ubuntu.com/usn/USN-998-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A119
ww.ubuntu.com/usn/USN-998-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11943 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-997-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=590116 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3176 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44243 - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.
- http://www.securityfocus.com/bid/44243 - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12132 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - https://bugzilla.mozilla.org/show_bug.cgi?id=566141 - https://bugzilla.mozilla.org/show_bug.cgi?id=559344 - http://www.redhat.com/support/errata/RHSA-2010-0781.html - http://secunia.com/advisories/42867 - http://www.mozilla.org/security/announce/2010/mfsa2010-64.html - http://www.mandriva.com/se
cunia.com/advisories/42867 - http://www.mozilla.org/security/announce/2010/mfsa2010-64.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - https://bugzilla.mozilla.org/show_bug.cgi?id=594760 - http://www.ubuntu.com/usn/USN-998-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=568303 - http://www.debian.org/security/2010/dsa-2124 - https://bugzilla.mozilla.org/show_bug.cgi?id=568073 - http://support.avaya.com/css/P8/documents/100114250 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-997-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=509075 - https://bugzilla.mozilla.org/show_bug.cgi
untu.com/usn/USN-997-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=509075 - https://bugzilla.mozilla.org/show_bug.cgi?id=580151 - https://bugzilla.mozilla.org/show_bug.cgi?id=583957 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://www.redhat.com/support/errata/RHSA-2010-0780.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3177 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - https://oval.cisecurity.org/repository/search/defin
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12202 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - https://bugzilla.mozilla.org/show_bug.cgi?id=556734 - http://www.redhat.com/support/errata/RHSA-2010-0781.html - http://www.mozilla.org/security/announce/2010/mfsa2010-68.html - http://secunia.com/advisories/42867 - http://www.vupen.com/english/advisories/2011/0061 - http://www.debian.org/security/2010/dsa-2124 - http://support.avaya.com/css/P8/documents/100114250 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-9
a.com/css/P8/documents/100114250 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-997-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3178 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:17.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2010/mfsa2010-69.html - http://www.redhat.com/
Program Container: References: - http://www.mozilla.org/security/announce/2010/mfsa2010-69.html - http://www.redhat.com/support/errata/RHSA-2010-0782.html - https://bugzilla.mozilla.org/show_bug.cgi?id=576616 - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://secunia.com/advisories/42867 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://www.debian.org/security/2010/dsa-2124 - http://support.avaya.com/css/P8/documents
/www.ubuntu.com/usn/USN-998-1 - http://www.debian.org/security/2010/dsa-2124 - http://support.avaya.com/css/P8/documents/100120156 - http://www.securityfocus.com/bid/44252 - http://www.ubuntu.com/usn/USN-997-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12120 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3179 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=583077 - http://www.redhat.com/support/errata/RHSA-20
tainer: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=583077 - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11675 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://secunia.com/advisories/42867 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://www.debian.org/security/2010/dsa-2124 - http://support.avaya.c