VULNERABILITY INTELLIGENCE
CVE-2010-3167
CVSS score9.3 HIGH
EPSS probability6.53%
CISA KEVNot currently listed
Published2010-09-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer