First published: Thu Oct 21 2010(Updated: )
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | =3.6 | |
Mozilla Firefox | =3.6.2 | |
Mozilla Firefox | =3.6.3 | |
Mozilla Firefox | =3.6.4 | |
Mozilla Firefox | =3.6.6 | |
Mozilla Firefox | =3.6.7 | |
Mozilla Firefox | =3.6.8 | |
Mozilla Firefox | =3.6.9 | |
Mozilla Firefox | =3.6.10 | |
Mozilla Thunderbird | =3.1 | |
Mozilla Thunderbird | =3.1.1 | |
Mozilla Thunderbird | =3.1.2 | |
Mozilla Thunderbird | =3.1.3 | |
Mozilla Thunderbird | =3.1.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3175 has a severity rating indicating it may lead to denial of service and potentially allow remote code execution.
To fix CVE-2010-3175, update Mozilla Firefox to version 3.6.11 or later and Thunderbird to version 3.1.5 or later.
CVE-2010-3175 affects Mozilla Firefox versions 3.6.x before 3.6.11 and Thunderbird versions 3.1.x before 3.1.5.
Yes, CVE-2010-3175 can be exploited remotely through unspecified vectors leading to various types of attacks.
The potential impacts of CVE-2010-3175 include application crashes and the possibility of arbitrary code execution.