The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2132-1 | New xulrunner packages fix several vulnerabilities |
EUVD |
EUVD-2010-3748 | The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T03:18:53.052Z
Reserved: 2010-10-05T00:00:00
Link: CVE-2010-3769
No data.
Status : Deferred
Published: 2010-12-10T19:00:02.390
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-3769
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD