VULNERABILITY INTELLIGENCE
CVE-2010-2753
CVSS score8.8 HIGH
EPSS probability6.67%
CISA KEVNot currently listed
Published2010-07-30
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.
Weakness classification
- CWE-190: Integer Overflow or Wraparound
- CWE-416: Use After Free
Primary references
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Exploit, Issue Tracking
- cve@mitre.org — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry