جزئیات آسیب‌پذیری

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

• http://www.securityfocus.com/bid/44425 vdb-entryx_refsource_BID
• https://rhn.redhat.com/errata/RHSA-2010-0812.html vendor-advisoryx_refsource_REDHAT
• https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53 x_refsource_MISC
• http://www.vupen.com/english/advisories/2010/2837 vdb-entryx_refsource_VUPEN
• https://bugzilla.redhat.com/show_bug.cgi?id=646997 x_refsource_CONFIRM
• http://support.avaya.com/css/P8/documents/100114335 x_refsource_CONFIRM
• http://secunia.com/advisories/41965 third-party-advisoryx_refsource_SECUNIA
• http://secunia.com/advisories/41975 third-party-advisoryx_refsource_SECUNIA
• http://www.redhat.com/support/errata/RHSA-2010-0896.html vendor-advisoryx_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2010-0808.html vendor-advisoryx_refsource_REDHAT
• http://www.exploit-db.com/exploits/15341 exploitx_refsource_EXPLOIT-DB
• http://www.securitytracker.com/id?1024651 vdb-entryx_refsource_SECTRACK
• http://secunia.com/advisories/41761 third-party-advisoryx_refsource_SECUNIA
• https://bugzilla.mozilla.org/show_bug.cgi?id=607222 x_refsource_CONFIRM
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html vendor-advisoryx_refsource_FEDORA
• http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter x_refsource_MISC
• http://secunia.com/advisories/41969 third-party-advisoryx_refsource_SECUNIA
• http://www.ubuntu.com/usn/USN-1011-3 vendor-advisoryx_refsource_UBUNTU
• http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox x_refsource_CONFIRM
• http://www.norman.com/about_norman/press_center/news_archive/2010/129223/ x_refsource_MISC
• http://www.ubuntu.com/usn/usn-1011-1 vendor-advisoryx_refsource_UBUNTU
• http://www.securitytracker.com/id?1024650 vdb-entryx_refsource_SECTRACK
• http://www.ubuntu.com/usn/USN-1011-2 vendor-advisoryx_refsource_UBUNTU
• http://www.redhat.com/support/errata/RHSA-2010-0809.html vendor-advisoryx_refsource_REDHAT
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:219 vendor-advisoryx_refsource_MANDRIVA
• http://secunia.com/advisories/42867 third-party-advisoryx_refsource_SECUNIA
• http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/ x_refsource_CONFIRM
• http://www.vupen.com/english/advisories/2010/2857 vdb-entryx_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0061 vdb-entryx_refsource_VUPEN
• http://support.avaya.com/css/P8/documents/100114329 x_refsource_CONFIRM
• http://www.debian.org/security/2010/dsa-2124 vendor-advisoryx_refsource_DEBIAN
• http://www.securitytracker.com/id?1024645 vdb-entryx_refsource_SECTRACK
• http://secunia.com/advisories/42043 third-party-advisoryx_refsource_SECUNIA
• http://www.norman.com/security_center/virus_description_archive/129146/ x_refsource_MISC
• http://secunia.com/advisories/41966 third-party-advisoryx_refsource_SECUNIA
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:213 vendor-advisoryx_refsource_MANDRIVA
• http://secunia.com/advisories/42008 third-party-advisoryx_refsource_SECUNIA
• http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html vendor-advisoryx_refsource_FEDORA
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706 vendor-advisoryx_refsource_SLACKWARE
• http://www.vupen.com/english/advisories/2010/2871 vdb-entryx_refsource_VUPEN
• http://isc.sans.edu/diary.html?storyid=9817 x_refsource_MISC
• http://www.redhat.com/support/errata/RHSA-2010-0810.html vendor-advisoryx_refsource_REDHAT
• http://www.mozilla.org/security/announce/2010/mfsa2010-73.html x_refsource_CONFIRM
• http://www.exploit-db.com/exploits/15352 exploitx_refsource_EXPLOIT-DB
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108 vdb-entrysignaturex_refsource_OVAL
• http://secunia.com/advisories/42003 third-party-advisoryx_refsource_SECUNIA
• http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html vendor-advisoryx_refsource_FEDORA
• http://www.redhat.com/support/errata/RHSA-2010-0861.html vendor-advisoryx_refsource_REDHAT
• http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html vendor-advisoryx_refsource_FEDORA
• http://www.exploit-db.com/exploits/15342 exploitx_refsource_EXPLOIT-DB
• http://www.vupen.com/english/advisories/2010/2864 vdb-entryx_refsource_VUPEN
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765 government-resource