QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-3183

Back to search

CVE-2010-3183

Published: Oct 21, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2010:0782
vendor-advisory
x_refsource_REDHAT
RHSA-2010:0896
vendor-advisory
x_refsource_REDHAT
MDVSA-2010:210
vendor-advisory
x_refsource_MANDRIVA
42867
third-party-advisory
x_refsource_SECUNIA
MDVSA-2010:211
vendor-advisory
x_refsource_MANDRIVA
ADV-2011-0061
vdb-entry
x_refsource_VUPEN
USN-998-1
vendor-advisory
x_refsource_UBUNTU
DSA-2124
vendor-advisory
x_refsource_DEBIAN
44249
vdb-entry
x_refsource_BID
USN-997-1
vendor-advisory
x_refsource_UBUNTU
oval:org.mitre.oval:def:11891
vdb-entry
signature
x_refsource_OVAL
FEDORA-2010-16897
vendor-advisory
x_refsource_FEDORA
RHSA-2010:0861
vendor-advisory
x_refsource_REDHAT
FEDORA-2010-16885
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now