FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-1196

This CVE name corresponds to:

Entered Topic
2010-06-23 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2010-1196
Phase Assigned(20100330)

Description

Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-29.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=534666
CONFIRM http://support.avaya.com/css/P8/documents/100091069
FEDORA FEDORA-2010-10344
FEDORA FEDORA-2010-10361
MANDRIVA MDVSA-2010:125
REDHAT RHSA-2010:0500
REDHAT RHSA-2010:0501
SUSE SUSE-SA:2010:030
UBUNTU USN-930-1
UBUNTU USN-930-2
BID 41050
BID 41087
OVAL oval:org.mitre.oval:def:11424
OVAL oval:org.mitre.oval:def:14017
SECTRACK 1024138
SECTRACK 1024139
SECUNIA 40323
SECUNIA 40326
SECUNIA 40401
SECUNIA 40481
VUPEN ADV-2010-1551
VUPEN ADV-2010-1557
VUPEN ADV-2010-1640
VUPEN ADV-2010-1773
VUPEN ADV-2010-1592
XF firefox-nsgenericdomdatanode-bo(59665)