Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-1214 — Mozilla Seamonkey vulnerability

CWE-18917 documents8 sources

Severity

10.0CRITICALNVD

NVD9.3CNA9.3

EPSS

7.3%

top 8.28%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Mozilla Seamonkey Mozilla Firefox

Timeline

PublishedJul 30

Latest updateMay 17

Description

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDmozilla/seamonkey2.0.5+39

▶NVDmozilla/firefox15 versions+14

🔴Vulnerability Details

GHSA

GHSA-fwcv-j34v-fh3m: layout/generic/nsObjectFrame↗2022-05-17

▶

GHSA

GHSA-pwm3-w76v-hxc8: Integer overflow in Mozilla Firefox 3↗2022-05-02

▶

CVEList

CVE-2010-1214: Integer overflow in Mozilla Firefox 3↗2010-07-30

▶

CVEList

CVE-2010-2755: layout/generic/nsObjectFrame↗2010-07-29

▶

💥Exploits & PoCs

Exploit-DB

Mozilla Firefox 3.6.4 - 'Plugin' EnsureCachedAttrParamArrays Remote Code Execution↗2010-09-17

▶

Exploit-DB

Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow↗2010-07-20

▶

🔍Detection Rules

Suricata

ET WEB_CLIENT Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Attempt↗2010-09-27

▶

📋Vendor Advisories

Ubuntu

Firefox and Xulrunner vulnerability↗2010-07-26

▶

Ubuntu

Firefox and Xulrunner vulnerability↗2010-07-26

▶

Red Hat

Mozilla arbitrary free flaw↗2010-07-24

▶

Ubuntu

Firefox and Xulrunner vulnerabilities↗2010-07-23

▶

Ubuntu

ant, apturl, Epiphany, gluezilla, gnome-python-extras, liferea, mozvoikko, OpenJDK, packagekit, ubufox, webfav, yelp update↗2010-07-23

▶

💬Community

Bugzilla

CVE-2010-1214 Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability↗2010-07-16

▶