CVE-2010-3765

Published: Oct 28, 2010Modified: Apr 22, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Affected (56)

Products: Mozilla: Firefox, Thunderbird, Seamonkey

3 products

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.5.10
Mozilla Firefox	Version 3.5.11
Mozilla Firefox	Version 3.5.12
Mozilla Firefox	Version 3.5.13
Mozilla Firefox	Version 3.5.14
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Firefox	Version 3.5.6
Mozilla Firefox	Version 3.5.7
Mozilla Firefox	Version 3.5.8
Mozilla Firefox	Version 3.5.9
Mozilla Firefox	Version 3.5

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.6.10
Mozilla Firefox	Version 3.6.11
Mozilla Firefox	Version 3.6.2
Mozilla Firefox	Version 3.6.3
Mozilla Firefox	Version 3.6.4
Mozilla Firefox	Version 3.6.6
Mozilla Firefox	Version 3.6.7
Mozilla Firefox	Version 3.6.8
Mozilla Firefox	Version 3.6.9
Mozilla Firefox	Version 3.6

Configuration C

14 vulnerable

Vulnerable Software	Affected Versions
Mozilla Thunderbird	Version 3.0.1
Mozilla Thunderbird	Version 3.0.2
Mozilla Thunderbird	Version 3.0.3
Mozilla Thunderbird	Version 3.0.4
Mozilla Thunderbird	Version 3.0.5
Mozilla Thunderbird	Version 3.0.6
Mozilla Thunderbird	Version 3.0.7
Mozilla Thunderbird	Version 3.0.8
Mozilla Thunderbird	Version 3.0.9
Mozilla Thunderbird	Version 3.1.1
Mozilla Thunderbird	Version 3.1.2
Mozilla Thunderbird	Version 3.1.3
Mozilla Thunderbird	Version 3.1.4
Mozilla Thunderbird	Version 3.1.5

Configuration D

17 vulnerable

Vulnerable Software	Affected Versions
Mozilla Seamonkey	Version 2.0.1
Mozilla Seamonkey	Version 2.0.2
Mozilla Seamonkey	Version 2.0.3
Mozilla Seamonkey	Version 2.0.4
Mozilla Seamonkey	Version 2.0.5
Mozilla Seamonkey	Version 2.0.6
Mozilla Seamonkey	Version 2.0.7
Mozilla Seamonkey	Version 2.0.8
Mozilla Seamonkey	Version 2.0.9
Mozilla Seamonkey	Version 2.0
Mozilla Seamonkey	Version 2.0 alpha_1
Mozilla Seamonkey	Version 2.0 alpha_2
Mozilla Seamonkey	Version 2.0 alpha_3
Mozilla Seamonkey	Version 2.0 beta_1
Mozilla Seamonkey	Version 2.0 beta_2
Mozilla Seamonkey	Version 2.0 rc1
Mozilla Seamonkey	Version 2.0 rc2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (103)

http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/

Source: cve@mitre.org

Vendor Advisory

http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox

Source: cve@mitre.org

Broken Link

http://isc.sans.edu/diary.html?storyid=9817

Source: cve@mitre.org

Press/Media Coverage

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html

Source: cve@mitre.org

Third Party Advisory

http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter

Source: cve@mitre.org

Product

http://secunia.com/advisories/41761

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/41965

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/41966

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/41969

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/41975

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/42003

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/42008

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/42043

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/42867

Source: cve@mitre.org

Vendor Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/css/P8/documents/100114329

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/css/P8/documents/100114335

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2010/dsa-2124

Source: cve@mitre.org

Third Party Advisory

http://www.exploit-db.com/exploits/15341

Source: cve@mitre.org

Exploit

http://www.exploit-db.com/exploits/15342

Source: cve@mitre.org

Exploit

http://www.exploit-db.com/exploits/15352

Source: cve@mitre.org

Exploit

http://www.mandriva.com/security/advisories?name=MDVSA-2010:213

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:219

Source: cve@mitre.org

Third Party Advisory

http://www.mozilla.org/security/announce/2010/mfsa2010-73.html

Source: cve@mitre.org

Third Party Advisory

http://www.norman.com/about_norman/press_center/news_archive/2010/129223/

Source: cve@mitre.org

Broken Link

http://www.norman.com/security_center/virus_description_archive/129146/

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2010-0808.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0809.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0810.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0861.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0896.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/44425

Source: cve@mitre.org

Broken Link

http://www.securitytracker.com/id?1024645

Source: cve@mitre.org

Broken Link

http://www.securitytracker.com/id?1024650

Source: cve@mitre.org

Broken Link

http://www.securitytracker.com/id?1024651

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/USN-1011-2

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-1011-3

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/usn-1011-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2010/2837

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2857

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2864

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/2871

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0061

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=607222

Source: cve@mitre.org

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53

Source: cve@mitre.org

Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=646997

Source: cve@mitre.org

Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108

Source: cve@mitre.org

Third Party Advisory

https://rhn.redhat.com/errata/RHSA-2010-0812.html

Source: cve@mitre.org

Third Party Advisory

http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/