Home > Vulnerability Database > CVE-2010-0175

Mend.io Vulnerability Database

CVE-2010-0175

Date: April 5, 2010

Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.

Severity Score

8.1

Related Resources (38)

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/57390

Url: http://secunia.com/advisories/39308

Url: http://www.vupen.com/english/advisories/2010/0790

Url: http://secunia.com/advisories/39204

Url: https://access.redhat.com/security/cve/CVE-2010-0175

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=375928

Url: http://www.mozilla.org/security/announce/2010/mfsa2010-17.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0333.html

Url: http://securitytracker.com/id?1023782

Url: http://secunia.com/advisories/39397

Url: http://securitytracker.com/id?1023780

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-0175

Url: http://www.debian.org/security/2010/dsa-2027

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=540100

Url: http://www.vupen.com/english/advisories/2010/0781

Url: http://secunia.com/advisories/39136

Url: http://www.vupen.com/english/advisories/2010/0748

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Url: http://ubuntu.com/usn/usn-921-1

Url: http://www.zerodayinitiative.com/advisories/ZDI-10-050

Url: http://www.vupen.com/english/advisories/2010/0765

Url: http://secunia.com/advisories/38566

Url: http://www.vupen.com/english/advisories/2010/0764

Url: http://secunia.com/advisories/39117

Url: http://secunia.com/advisories/39242

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-0175

Url: http://secunia.com/advisories/39243

Url: http://secunia.com/advisories/39240

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546

Url: http://www.vupen.com/english/advisories/2010/0849

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:070

Url: http://www.securityfocus.com/archive/1/510542/100/0/threaded

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0332.html

Url: https://www.mend.io/vulnerability-database/CVE-2010-0175

Severity Score

8.1

Weakness Type (CWE)

Resource Management Errors

CWE-399

CVSS v3.1

Base Score:	8.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-0175

Date: April 5, 2010

Severity Score

Related Resources (38)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?