{"api_version":"1","generated_at":"2026-07-23T09:55:47+00:00","cve":"CVE-2010-3765","urls":{"html":"https://cve.report/CVE-2010-3765","api":"https://cve.report/api/cve/CVE-2010-3765.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-3765","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3765"},"summary":{"title":"CVE-2010-3765","description":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-10-28 00:00:05","updated_at":"2026-04-22 14:15:57"},"problem_types":["CWE-119","n/a","CWE-119 CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.exploit-db.com/exploits/15342","name":"http://www.exploit-db.com/exploits/15342","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Firefox Memory Corruption Proof of Concept (Simplified)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/15352","name":"http://www.exploit-db.com/exploits/15352","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Firefox 3.6.8 - 3.6.11 Interleaving document.write and appendChild Exploit (From the Wild)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","name":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Critical vulnerability in Firefox 3.5 and Firefox 3.6  at  Mozilla Security Blog","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html","name":"http://www.redhat.com/support/errata/RHSA-2010-0808.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support | Red Hat","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.avaya.com/css/P8/documents/100114329","name":"http://support.avaya.com/css/P8/documents/100114329","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"ASA-2010-311 (RHSA-2010-0808)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/","name":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Norman — Proactive IT security","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/41761","name":"http://secunia.com/advisories/41761","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for firefox - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024651","name":"http://www.securitytracker.com/id?1024651","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"SecurityTracker.com Archives - Mozilla Thunderbird Heap Overflow Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024645","name":"http://www.securitytracker.com/id?1024645","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"SecurityTracker.com Archives - Mozilla Firefox Heap Overflow Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/41965","name":"http://secunia.com/advisories/41965","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Red Hat update for seamonkey - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-1011-3","name":"http://www.ubuntu.com/usn/USN-1011-3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-1011-3: Xulrunner vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html","name":"https://rhn.redhat.com/errata/RHSA-2010-0812.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"access.redhat.com","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/2864","name":"http://www.vupen.com/english/advisories/2010/2864","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail | OVH- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/41969","name":"http://secunia.com/advisories/41969","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Red Hat update for firefox - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42008","name":"http://secunia.com/advisories/42008","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Red Hat update for thunderbird - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765","name":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765","refsource":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1024650","name":"http://www.securitytracker.com/id?1024650","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"SecurityTracker.com Archives - Mozilla Seamonkey Heap Overflow Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/15341","name":"http://www.exploit-db.com/exploits/15341","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Firefox Interleaving document.write and appendChild Denial of Service","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42043","name":"http://secunia.com/advisories/42043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Fedora update for firefox and xulrunner - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","name":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Security","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora 12 Update: galeon-2.0.7-27.fc12","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/41966","name":"http://secunia.com/advisories/41966","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Red Hat update for xulrunner - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support / Security / Advisories /  / MDVSA-2010:219 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997","name":"https://bugzilla.redhat.com/show_bug.cgi?id=646997","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"title":"646997 – (CVE-2010-3765) CVE-2010-3765 Firefox race condition flaw (MFSA 2010-73)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora 14 Update: seamonkey-2.0.10-1.fc14","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora 14 Update: galeon-2.0.7-35.fc14.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706","name":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"The Slackware Linux Project: Slackware Security Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html","name":"http://www.redhat.com/support/errata/RHSA-2010-0896.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support | Red Hat","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://isc.sans.edu/diary.html?storyid=9817","name":"http://isc.sans.edu/diary.html?storyid=9817","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Press/Media Coverage"],"title":"Firefox news","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42003","name":"http://secunia.com/advisories/42003","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for xulrunner - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/2837","name":"http://www.vupen.com/english/advisories/2010/2837","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail | OVH- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.norman.com/security_center/virus_description_archive/129146/","name":"http://www.norman.com/security_center/virus_description_archive/129146/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Norman — Proactive IT security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222","name":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"title":"Bug 607222 – Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53","name":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"title":"Bug 607222 – Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/2871","name":"http://www.vupen.com/english/advisories/2010/2871","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail | OVH- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html","name":"http://www.redhat.com/support/errata/RHSA-2010-0809.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/2857","name":"http://www.vupen.com/english/advisories/2010/2857","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail | OVH- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html","name":"http://www.redhat.com/support/errata/RHSA-2010-0861.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support | Red Hat","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/44425","name":"http://www.securityfocus.com/bid/44425","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Mozilla Firefox 3.5/3.6 Remote Heap Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html","name":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"MFSA 2010-73: Heap buffer overflow mixing document.write and DOM insertion","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-1011-2","name":"http://www.ubuntu.com/usn/USN-1011-2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-1011-2: Thunderbird vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support / Security / Advisories /  / MDVSA-2010:213 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.avaya.com/css/P8/documents/100114335","name":"http://support.avaya.com/css/P8/documents/100114335","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"ASA-2010-312 (RHSA-2010-0810)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html","name":"http://www.redhat.com/support/errata/RHSA-2010-0810.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42867","name":"http://secunia.com/advisories/42867","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Solaris Firefox Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/41975","name":"http://secunia.com/advisories/41975","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Mozilla Thunderbird \"document.write()\" and DOM Insertion Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora 13 Update: firefox-3.6.12-1.fc13","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-1011-1","name":"http://www.ubuntu.com/usn/usn-1011-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-1011-1: Firefox vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2010/dsa-2124","name":"http://www.debian.org/security/2010/dsa-2124","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-2124-1 xulrunner","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","name":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"],"title":"404 Page Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2011/0061","name":"http://www.vupen.com/english/advisories/2011/0061","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3765","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3765","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[{"source":"ADP","time":"2025-10-06T00:00:00.000Z","lang":"en","value":"CVE-2010-3765 added to CISA KEV"}],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.5.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"firefox","cpe6":"3.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"alpha_1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"alpha_2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"alpha_3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"beta_1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"beta_2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"2.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3765","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"thunderbird","cpe6":"3.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":{"cve_year":"2010","cve_id":"3765","cve":"CVE-2010-3765","vendorProject":"Mozilla","product":"Multiple Products","vulnerabilityName":"Mozilla Multiple Products Remote Code Execution Vulnerability","dateAdded":"2025-10-06","shortDescription":"Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","dueDate":"2025-10-27","knownRansomwareCampaignUse":"Unknown","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ; https://nvd.nist.gov/vuln/detail/CVE-2010-3765","cwes":"","catalogVersion":"2026.07.22","updated_at":"2026-07-22 20:07:15"},"epss":{"cve_year":"2010","cve_id":"3765","cve":"CVE-2010-3765","epss":"0.832790000","percentile":"0.996490000","score_date":"2026-07-22","updated_at":"2026-07-23 00:09:32"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:18:53.216Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"44425","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/44425"},{"name":"RHSA-2010:0812","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53"},{"name":"ADV-2010-2837","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2837"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/css/P8/documents/100114335"},{"name":"41965","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41965"},{"name":"41975","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41975"},{"name":"RHSA-2010:0896","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html"},{"name":"RHSA-2010:0808","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html"},{"name":"15341","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15341"},{"name":"1024651","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024651"},{"name":"41761","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41761"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"},{"name":"FEDORA-2010-17105","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter"},{"name":"41969","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41969"},{"name":"USN-1011-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1011-3"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/"},{"name":"USN-1011-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-1011-1"},{"name":"1024650","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024650"},{"name":"USN-1011-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1011-2"},{"name":"RHSA-2010:0809","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html"},{"name":"MDVSA-2010:219","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219"},{"name":"42867","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42867"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/"},{"name":"ADV-2010-2857","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2857"},{"name":"ADV-2011-0061","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0061"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/css/P8/documents/100114329"},{"name":"DSA-2124","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2010/dsa-2124"},{"name":"1024645","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024645"},{"name":"42043","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42043"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.norman.com/security_center/virus_description_archive/129146/"},{"name":"41966","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41966"},{"name":"MDVSA-2010:213","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213"},{"name":"42008","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42008"},{"name":"FEDORA-2010-16883","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html"},{"name":"SSA:2010-305-01","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"],"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706"},{"name":"ADV-2010-2871","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2871"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://isc.sans.edu/diary.html?storyid=9817"},{"name":"RHSA-2010:0810","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html"},{"name":"15352","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15352"},{"name":"oval:org.mitre.oval:def:12108","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108"},{"name":"42003","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42003"},{"name":"FEDORA-2010-16897","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html"},{"name":"RHSA-2010:0861","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html"},{"name":"FEDORA-2010-16885","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html"},{"name":"15342","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15342"},{"name":"ADV-2010-2864","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2864"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2010-3765","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-10-04T03:55:28.039016Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-10-06","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-22T00:05:51.248Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765"}],"timeline":[{"lang":"en","time":"2025-10-06T00:00:00.000Z","value":"CVE-2010-3765 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-10-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"44425","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/44425"},{"name":"RHSA-2010:0812","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html"},{"tags":["x_refsource_MISC"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53"},{"name":"ADV-2010-2837","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2837"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/css/P8/documents/100114335"},{"name":"41965","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41965"},{"name":"41975","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41975"},{"name":"RHSA-2010:0896","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html"},{"name":"RHSA-2010:0808","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html"},{"name":"15341","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15341"},{"name":"1024651","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024651"},{"name":"41761","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41761"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"},{"name":"FEDORA-2010-17105","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html"},{"tags":["x_refsource_MISC"],"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter"},{"name":"41969","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41969"},{"name":"USN-1011-3","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1011-3"},{"tags":["x_refsource_CONFIRM"],"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox"},{"tags":["x_refsource_MISC"],"url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/"},{"name":"USN-1011-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-1011-1"},{"name":"1024650","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024650"},{"name":"USN-1011-2","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1011-2"},{"name":"RHSA-2010:0809","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html"},{"name":"MDVSA-2010:219","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219"},{"name":"42867","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42867"},{"tags":["x_refsource_CONFIRM"],"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/"},{"name":"ADV-2010-2857","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2857"},{"name":"ADV-2011-0061","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0061"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/css/P8/documents/100114329"},{"name":"DSA-2124","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2010/dsa-2124"},{"name":"1024645","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024645"},{"name":"42043","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42043"},{"tags":["x_refsource_MISC"],"url":"http://www.norman.com/security_center/virus_description_archive/129146/"},{"name":"41966","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41966"},{"name":"MDVSA-2010:213","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213"},{"name":"42008","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42008"},{"name":"FEDORA-2010-16883","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html"},{"name":"SSA:2010-305-01","tags":["vendor-advisory","x_refsource_SLACKWARE"],"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706"},{"name":"ADV-2010-2871","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2871"},{"tags":["x_refsource_MISC"],"url":"http://isc.sans.edu/diary.html?storyid=9817"},{"name":"RHSA-2010:0810","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html"},{"name":"15352","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15352"},{"name":"oval:org.mitre.oval:def:12108","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108"},{"name":"42003","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42003"},{"name":"FEDORA-2010-16897","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html"},{"name":"RHSA-2010:0861","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html"},{"name":"FEDORA-2010-16885","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html"},{"name":"15342","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15342"},{"name":"ADV-2010-2864","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2864"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-3765","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"44425","refsource":"BID","url":"http://www.securityfocus.com/bid/44425"},{"name":"RHSA-2010:0812","refsource":"REDHAT","url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53","refsource":"MISC","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53"},{"name":"ADV-2010-2837","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2837"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=646997","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997"},{"name":"http://support.avaya.com/css/P8/documents/100114335","refsource":"CONFIRM","url":"http://support.avaya.com/css/P8/documents/100114335"},{"name":"41965","refsource":"SECUNIA","url":"http://secunia.com/advisories/41965"},{"name":"41975","refsource":"SECUNIA","url":"http://secunia.com/advisories/41975"},{"name":"RHSA-2010:0896","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html"},{"name":"RHSA-2010:0808","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html"},{"name":"15341","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15341"},{"name":"1024651","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024651"},{"name":"41761","refsource":"SECUNIA","url":"http://secunia.com/advisories/41761"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222","refsource":"CONFIRM","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"},{"name":"FEDORA-2010-17105","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html"},{"name":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","refsource":"MISC","url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter"},{"name":"41969","refsource":"SECUNIA","url":"http://secunia.com/advisories/41969"},{"name":"USN-1011-3","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1011-3"},{"name":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","refsource":"CONFIRM","url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox"},{"name":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/","refsource":"MISC","url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/"},{"name":"USN-1011-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-1011-1"},{"name":"1024650","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024650"},{"name":"USN-1011-2","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1011-2"},{"name":"RHSA-2010:0809","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html"},{"name":"MDVSA-2010:219","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219"},{"name":"42867","refsource":"SECUNIA","url":"http://secunia.com/advisories/42867"},{"name":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","refsource":"CONFIRM","url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/"},{"name":"ADV-2010-2857","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2857"},{"name":"ADV-2011-0061","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0061"},{"name":"http://support.avaya.com/css/P8/documents/100114329","refsource":"CONFIRM","url":"http://support.avaya.com/css/P8/documents/100114329"},{"name":"DSA-2124","refsource":"DEBIAN","url":"http://www.debian.org/security/2010/dsa-2124"},{"name":"1024645","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024645"},{"name":"42043","refsource":"SECUNIA","url":"http://secunia.com/advisories/42043"},{"name":"http://www.norman.com/security_center/virus_description_archive/129146/","refsource":"MISC","url":"http://www.norman.com/security_center/virus_description_archive/129146/"},{"name":"41966","refsource":"SECUNIA","url":"http://secunia.com/advisories/41966"},{"name":"MDVSA-2010:213","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213"},{"name":"42008","refsource":"SECUNIA","url":"http://secunia.com/advisories/42008"},{"name":"FEDORA-2010-16883","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html"},{"name":"SSA:2010-305-01","refsource":"SLACKWARE","url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706"},{"name":"ADV-2010-2871","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2871"},{"name":"http://isc.sans.edu/diary.html?storyid=9817","refsource":"MISC","url":"http://isc.sans.edu/diary.html?storyid=9817"},{"name":"RHSA-2010:0810","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html"},{"name":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html","refsource":"CONFIRM","url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html"},{"name":"15352","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15352"},{"name":"oval:org.mitre.oval:def:12108","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108"},{"name":"42003","refsource":"SECUNIA","url":"http://secunia.com/advisories/42003"},{"name":"FEDORA-2010-16897","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html"},{"name":"RHSA-2010:0861","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html"},{"name":"FEDORA-2010-16885","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html"},{"name":"15342","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15342"},{"name":"ADV-2010-2864","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2864"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-3765","datePublished":"2010-10-27T22:00:00.000Z","dateReserved":"2010-10-05T00:00:00.000Z","dateUpdated":"2025-10-22T00:05:51.248Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-10-28 00:00:05","lastModifiedDate":"2026-04-22 14:15:57","problem_types":["CWE-119","n/a","CWE-119 CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"BC6B977F-292F-4981-95A0-6065A3C487D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"342226B9-2C0C-416C-81FE-19C49F03AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"2A6A28E0-F67A-4275-B0D9-A02822E9EF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"ECAB4696-76F3-458C-B33B-D7F8690C60A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BBB444FD-15F3-4447-9EA8-1669779A5749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"F92E2EF3-A612-476F-9D31-1EEC240C7EA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"0F175D30-2416-4172-BF11-DA78D252D608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"5DD3F168-3EF4-492E-BBAA-EACB1357C709"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"4B46BA97-2860-45E4-9FD3-F418A202E4F0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F3782354-7EB7-49D2-B240-1871F6CB84C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"30D47263-03AD-4060-91E3-90F997B3D174"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"AFD775DF-277E-4D5B-B980-B8E6E782467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C8587BFD-417D-42BE-A5F8-22FDC68FA9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"D7364FAB-EEE9-4064-A8AD-6547239F9AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"4C50485F-BC7B-4B70-A47B-1712E2DBAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"51EE386B-0833-484E-A2AB-86B4470D4D45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"C3EF1B4D-6556-4B3C-BDD0-6348A4D4A91D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"68C5C7CF-005B-42FC-B950-90303F0CC115"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"0B2FA2CF-7FE4-43B1-96A0-C14666EDBD7B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4BF605F6-2A84-4DE5-AB62-282E9C46479B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"08F10B5E-0780-4756-919C-B0C00C673412"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6D930F0F-DCC3-4905-A4B1-288F0CCC6975"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CBA0F9D4-B68A-4018-BC4E-95B87A1A8489"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"61CCB291-B71B-40D3-8493-215003851BDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AFD1FE7A-B888-461D-93F3-B71C94B4AA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E2727C9C-618D-4AEF-B7BE-8BE5935483F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"95B21CE4-AF78-4D1B-A73E-84E83DB4A2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"48F3528F-4E43-4D91-957E-49C7DB2A135A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27B9EA91-A461-42CE-9ED7-3805BD13A4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8C48E432-8945-4918-B2A4-AD2E05A51633"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2A95B301-A72B-4F95-A7D6-4B574E9D3BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"968C261F-A7D5-4EB6-BCFF-EE40DB5A11D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"EB49CD91-C21E-4494-97CF-DDCFB38B2D92"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*","matchCriteriaId":"58EB8E8A-84DE-43AA-B8F0-B585FB73D724"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*","matchCriteriaId":"C19C0BF7-390D-4E2E-BA32-28DFF73C55F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*","matchCriteriaId":"5FE5E50C-80ED-4CA7-BC85-8BD2E324D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*","matchCriteriaId":"FEBF912C-A12E-4DBD-84AC-8B440E190BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"9B8EDED6-29EF-4A9F-955D-F5E6611C2141"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*","matchCriteriaId":"EDC9C82D-586A-48F4-B540-1E2AE79806B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"51FCF83B-630A-4413-BFAA-0C24A6B8F4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"84B2AA0A-0220-49DD-82CD-37FDC563F146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D754AF10-1E43-46C8-A444-E7DB3401509D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34182167-F1DF-455B-BFDB-0A8491590479"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B8ECA6CE-20D0-4A4F-B376-888A9328B044"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1FEFCAB0-E57A-46E8-94C7-8510BB87C6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FB5C972-AF7B-4EC7-BCE5-867CACCF5C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C68DBB31-7804-446E-9A53-073E4B74E851"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"31ADCC51-CE05-4EB6-BE8F-B64FD62946A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"387390AE-CF25-47ED-BD36-F42455DE1A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"78D5F0AD-9974-40A1-942F-0F03A278DAD9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"3765","Ordinal":"1","Title":"CVE-2010-3765","CVE":"CVE-2010-3765","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"3765","Ordinal":"1","NoteData":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.","Type":"Description","Title":"CVE-2010-3765"},{"CveYear":"2010","CveId":"3765","Ordinal":"2","NoteData":"2010-10-27","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"3765","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}