CVE-2010-1199

Published: Jun 24, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

Affected (100)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Firefox	Version 3.5.6
Mozilla Firefox	Version 3.5.7
Mozilla Firefox	Version 3.5.9
Mozilla Firefox	Version 3.5

Configuration B

46 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Up to 2.0.4
Mozilla Seamonkey	Version 1.0.1
Mozilla Seamonkey	Version 1.0.2
Mozilla Seamonkey	Version 1.0.3
Mozilla Seamonkey	Version 1.0.4
Mozilla Seamonkey	Version 1.0.5
Mozilla Seamonkey	Version 1.0.6
Mozilla Seamonkey	Version 1.0.7
Mozilla Seamonkey	Version 1.0.8
Mozilla Seamonkey	Version 1.0.9
Mozilla Seamonkey	Version 1.0
Mozilla Seamonkey	Version 1.0 alpha
Mozilla Seamonkey	Version 1.0 beta
Mozilla Seamonkey	Version 1.1.10
Mozilla Seamonkey	Version 1.1.11
Mozilla Seamonkey	Version 1.1.12
Mozilla Seamonkey	Version 1.1.13
Mozilla Seamonkey	Version 1.1.14
Mozilla Seamonkey	Version 1.1.15
Mozilla Seamonkey	Version 1.1.16
Mozilla Seamonkey	Version 1.1.17
Mozilla Seamonkey	Version 1.1.18
Mozilla Seamonkey	Version 1.1.19
Mozilla Seamonkey	Version 1.1.1
Mozilla Seamonkey	Version 1.1.2
Mozilla Seamonkey	Version 1.1.3
Mozilla Seamonkey	Version 1.1.4
Mozilla Seamonkey	Version 1.1.5
Mozilla Seamonkey	Version 1.1.6
Mozilla Seamonkey	Version 1.1.7
Mozilla Seamonkey	Version 1.1.8
Mozilla Seamonkey	Version 1.1.9
Mozilla Seamonkey	Version 1.1
Mozilla Seamonkey	Version 1.1 alpha
Mozilla Seamonkey	Version 1.1 beta
Mozilla Seamonkey	Version 2.0.1
Mozilla Seamonkey	Version 2.0.2
Mozilla Seamonkey	Version 2.0.3
Mozilla Seamonkey	Version 2.0
Mozilla Seamonkey	Version 2.0 alpha_1
Mozilla Seamonkey	Version 2.0 alpha_2
Mozilla Seamonkey	Version 2.0 alpha_3
Mozilla Seamonkey	Version 2.0 beta_1
Mozilla Seamonkey	Version 2.0 beta_2
Mozilla Seamonkey	Version 2.0 rc1
Mozilla Seamonkey	Version 2.0 rc2

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.6.2
Mozilla Firefox	Version 3.6.3
Mozilla Firefox	Version 3.6

Configuration D

42 vulnerable

Vulnerable Software	Affected Versions
Mozilla Thunderbird	Up to 3.0.4
Mozilla Thunderbird	Version 0.1
Mozilla Thunderbird	Version 0.2
Mozilla Thunderbird	Version 0.3
Mozilla Thunderbird	Version 0.4
Mozilla Thunderbird	Version 0.5
Mozilla Thunderbird	Version 0.6
Mozilla Thunderbird	Version 0.7
Mozilla Thunderbird	Version 0.8
Mozilla Thunderbird	Version 0.9
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0.8
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5.0.10
Mozilla Thunderbird	Version 1.5.0.12
Mozilla Thunderbird	Version 1.5.0.13
Mozilla Thunderbird	Version 1.5.0.14
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.5
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5.0.9
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.12
Mozilla Thunderbird	Version 2.0.0.14
Mozilla Thunderbird	Version 2.0.0.16
Mozilla Thunderbird	Version 2.0.0.17
Mozilla Thunderbird	Version 2.0.0.18
Mozilla Thunderbird	Version 2.0.0.19
Mozilla Thunderbird	Version 2.0.0.4
Mozilla Thunderbird	Version 2.0.0.5
Mozilla Thunderbird	Version 2.0.0.6
Mozilla Thunderbird	Version 2.0.0.9
Mozilla Thunderbird	Version 3.0.1
Mozilla Thunderbird	Version 3.0.2
Mozilla Thunderbird	Version 3.0.3
Mozilla Thunderbird	Version 3.0

Related CWEs

CWE-189

References (64)

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html

Source: cve@mitre.org

http://secunia.com/advisories/40323

Source: cve@mitre.org

http://secunia.com/advisories/40326

Source: cve@mitre.org

http://secunia.com/advisories/40401

Source: cve@mitre.org

http://secunia.com/advisories/40481

Source: cve@mitre.org

http://support.avaya.com/css/P8/documents/100091069

Source: cve@mitre.org

http://ubuntu.com/usn/usn-930-1

Source: cve@mitre.org

http://www.exploit-db.com/exploits/14949

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:125

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2010/mfsa2010-30.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2010-0499.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2010-0500.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2010-0501.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/511972/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/41050

Source: cve@mitre.org

http://www.securityfocus.com/bid/41082

Source: cve@mitre.org

http://www.securitytracker.com/id?1024138

Source: cve@mitre.org

http://www.securitytracker.com/id?1024139

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-930-2

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1551

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1556

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1557

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1592

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1640

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1773

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-10-113

Source: cve@mitre.org

https://bugzilla.mozilla.org/show_bug.cgi?id=554255

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/59666

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html