Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Exploit.JS.CVE-2010-3765.a

 
Aliases:
Pattern:201101171330
Threat Type Propagation Methods Systems Affected Risk Level
  • Exploit
  • Exploit Vulnerability
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
Mozilla Firefox is prone to a remote heap buffer overflow vulnerability.
The vulnerability is caused due to an error when handling "document.write()" in combination with DOM insertions and can be exploited to cause a heap-based buffer overflow. The vulnerability can be triggered via RSS feeds if javaScript is enabled or via third party add-ons that enable browser-like functionality. By persuading a victim to visit a malicious web page, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim.

Affected: Mozilla Firefox 3.6.x
Mozilla Firefox 3.5.x
Mozilla Thunderbird 3.1.x
Mozilla Thunderbird 3.0.x
Mozilla SeaMonkey < 2.0.10

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.