CVE-2010-1211
Summary
| CVE | CVE-2010-1211 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-07-30 20:30:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. |
Risk And Classification
Primary CVSS: v2.0 9.3 from [email protected]
AV:N/AC:M/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Firefox | 3.5.1 | All | All | All |
| Application | Mozilla | Firefox | 3.5.10 | All | All | All |
| Application | Mozilla | Firefox | 3.5.2 | All | All | All |
| Application | Mozilla | Firefox | 3.5.3 | All | All | All |
| Application | Mozilla | Firefox | 3.5.4 | All | All | All |
| Application | Mozilla | Firefox | 3.5.5 | All | All | All |
| Application | Mozilla | Firefox | 3.5.6 | All | All | All |
| Application | Mozilla | Firefox | 3.5.7 | All | All | All |
| Application | Mozilla | Firefox | 3.5.9 | All | All | All |
| Application | Mozilla | Firefox | 3.6.1 | All | All | All |
| Application | Mozilla | Firefox | 3.6.2 | All | All | All |
| Application | Mozilla | Firefox | 3.6.3 | All | All | All |
| Application | Mozilla | Firefox | 3.6.4 | All | All | All |
| Application | Mozilla | Firefox | 3.6.6 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0 | alpha | All | All |
| Application | Mozilla | Seamonkey | 1.0 | beta | All | All |
| Application | Mozilla | Seamonkey | 1.0.1 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.2 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.3 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.4 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.5 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.6 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.7 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.8 | All | All | All |
| Application | Mozilla | Seamonkey | 1.0.9 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1 | alpha | All | All |
| Application | Mozilla | Seamonkey | 1.1 | beta | All | All |
| Application | Mozilla | Seamonkey | 1.1.1 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.10 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.11 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.12 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.13 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.14 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.15 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.16 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.17 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.18 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.19 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.2 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.3 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.4 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.5 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.6 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.7 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.8 | All | All | All |
| Application | Mozilla | Seamonkey | 1.1.9 | All | All | All |
| Application | Mozilla | Seamonkey | 1.5.0.10 | All | All | All |
| Application | Mozilla | Seamonkey | 1.5.0.8 | All | All | All |
| Application | Mozilla | Seamonkey | 1.5.0.9 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_2 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | alpha_3 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | beta_1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | beta_2 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | rc1 | All | All |
| Application | Mozilla | Seamonkey | 2.0 | rc2 | All | All |
| Application | Mozilla | Seamonkey | 2.0.1 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.2 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.3 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0.4 | All | All | All |
| Application | Mozilla | Seamonkey | 2.0a1pre | All | All | All |
| Application | Mozilla | Seamonkey | All | All | All | All |
| Application | Mozilla | Thunderbird | 3.0 | All | All | All |
| Application | Mozilla | Thunderbird | 3.0.1 | All | All | All |
| Application | Mozilla | Thunderbird | 3.0.2 | All | All | All |
| Application | Mozilla | Thunderbird | 3.0.3 | All | All | All |
| Application | Mozilla | Thunderbird | 3.0.4 | All | All | All |
| Application | Mozilla | Thunderbird | 3.0.5 | All | All | All |
| Application | Mozilla | Thunderbird | 3.1 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 561539 – "Assertion failure: isQName(), at ../jsobjinlines.h" or "Assertion failure: obj->getClass() == &js_NamespaceClass.base || IsQNameClass(obj->getClass()), at ../jsxml.cpp" with e4x | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| MFSA 2010-34: Miscellaneous memory safety hazards (rv:1.9.2.7/ 1.9.1.11) | af854a3a-2127-422b-91ae-364da2661108 | www.mozilla.org | Vendor Advisory |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| 564705 – String buffer underflow and crash [@ nsTextBoxFrame::UpdateAccessTitle] | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 570657 – nsCOMArray is inconsistent with the order in which it releases and removes elements from the array, which can cause a refcount to be decreased more than necessary | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 566136 – Assertion failure: isNative() after global.__proto__ = [] | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 559241 – ###!!! ASSERTION: this type of frame can't have overflow containers | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 507775 – Firefox crashes upon closing when selecting display:block for everything (* selector) in CSS with Firebug in [@ @0x0 | @0x349d7ff][@ @0x0 - nsLineLayout::ReflowFrame] | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 529087 – Crash [@ nsXBLBinding::AllowScripts] | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 535926 – "ASSERTION: This is unsafe" with <iframe>, XBL | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 574750 – Code that iterates through nsCSSValue::Arrays should use size_t for index now | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 567059 – Crash [@ js_LookupPropertyWithFlags] or "Assertion failure: isNative()," | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| 528644 – Crash [@ js_GetUpvar] | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.