CVE-2010-2759
Summary
| CVE | CVE-2010-2759 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-08-16 15:14:12 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticated users to cause a denial of service (bug invisibility) via a crafted comment. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:S/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Bugzilla | 2.23.1 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.2 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.3 | All | All | All |
| Application | Mozilla | Bugzilla | 2.23.4 | All | All | All |
| Application | Mozilla | Bugzilla | 2.4 | All | All | All |
| Application | Mozilla | Bugzilla | 2.6 | All | All | All |
| Application | Mozilla | Bugzilla | 2.8 | All | All | All |
| Application | Mozilla | Bugzilla | 2.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0 | rc1 | All | All |
| Application | Mozilla | Bugzilla | 3.0.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.10 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.11 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.8 | All | All | All |
| Application | Mozilla | Bugzilla | 3.0.9 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.0 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.1.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.2.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.3.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.4 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.5 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.4.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.2 | All | All | All |
| Application | Mozilla | Bugzilla | 3.5.3 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6 | All | All | All |
| Application | Mozilla | Bugzilla | 3.6.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.1 | All | All | All |
| Application | Mozilla | Bugzilla | 3.7.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| [SECURITY] Fedora 13 Update: bugzilla-3.4.8-2.fc13 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| 3.2.7, 3.4.7, 3.6.1, and 3.7.2 Security Advisory :: Bugzilla :: bugzilla.org | af854a3a-2127-422b-91ae-364da2661108 | www.bugzilla.org | |
| [SECURITY] Fedora 12 Update: bugzilla-3.4.8-1.fc12 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| Fedora update for bugzilla - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Bug 623423 – CVE-2010-2756 CVE-2010-2757 CVE-2010-2758 CVE-2010-2759 bugzilla: multiple vulnerabilities corrected in 3.4.8/3.6.2 | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| 583690 – (CVE-2010-2759) [SECURITY][PostgreSQL] Bugzilla crashes when viewing a bug if a comment contains 'bug <num>' or 'attachment <num>' where <num> is greater than the max allowed integer | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.mozilla.org | |
| Malformed Request | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| [SECURITY] Fedora 14 Update: bugzilla-3.6.2-1.fc14 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.