QwikSec

Security Database

CVE

CWE

Training

CVE-2010-2752

Published: Jul 30, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

oval:org.mitre.oval:def:11680

vdb-entry

signature

x_refsource_OVAL

vdb-entry

x_refsource_BID

http://www.zerodayinitiative.com/advisories/ZDI-10-133/

x_refsource_MISC

20100721 ZDI-10-133: Mozilla Firefox CSS font-face Remote Code Execution Vulnerability

mailing-list

x_refsource_BUGTRAQ

https://bugzilla.mozilla.org/show_bug.cgi?id=574059

x_refsource_CONFIRM

http://www.mozilla.org/security/announce/2010/mfsa2010-39.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.