Description
The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2132-1 | New xulrunner packages fix several vulnerabilities |
EUVD |
EUVD-2010-3748 | The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T03:18:53.052Z
Reserved: 2010-10-05T00:00:00.000Z
Link: CVE-2010-3769
No data.
Status : Deferred
Published: 2010-12-10T19:00:02.390
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-3769
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD