CVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerability
A race condition exists in Firefox's handling of DOM element (tags) properties. Malicious HTML content could use this flaw to execute arbitrary code as the user running Firefox.
This flaw does not affect the versions of SeaMonkey or Thunderbird shipped in Red Hat Enterprise Linux 3, 4, or 5.
Other sources
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SeaMonkeyto a version that resolves this vulnerability.Fixed in 2.0.10 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 3.0.10 - Configuration
Disable JavaScript in Mozilla Firefox (set javascript.enabled to false) to mitigate the remote code execution vector that occurs when JavaScript is enabled.
Mozilla Firefox JavaScript enabled = false - Configuration
Disable JavaScript in Thunderbird (set javascript.enabled to false) to mitigate the remote code execution vector that occurs when JavaScript is enabled.
Thunderbird JavaScript enabled = false - Configuration
Disable JavaScript in SeaMonkey (set javascript.enabled to false) to mitigate the remote code execution vector that occurs when JavaScript is enabled.
SeaMonkey JavaScript enabled = false - Compensating control
Follow applicable BOD 22-01 guidance for cloud services.
- Compensating control
Discontinue use of Mozilla Firefox, Thunderbird, or SeaMonkey if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3765?
The severity of CVE-2010-3765 is considered critical due to the potential for arbitrary code execution.
How do I fix CVE-2010-3765?
To fix CVE-2010-3765, upgrade to a patched version of Firefox, specifically versions later than 3.6.14.
What versions of Firefox are affected by CVE-2010-3765?
CVE-2010-3765 affects Firefox versions 3.5 to 3.6.14.
Can CVE-2010-3765 affect other software besides Firefox?
No, CVE-2010-3765 does not affect SeaMonkey or Thunderbird versions included in Red Hat Enterprise Linux.
What type of vulnerability is CVE-2010-3765?
CVE-2010-3765 is a race condition vulnerability that allows the execution of arbitrary code.