Mozilla Firefox and Thunderbird CVE-2010-3175 Multiple Memory-Corruption Vulnerabilities

Mozilla Firefox and Thunderbird are prone to multiple memory-corruption vulnerabilities because they fail to adequately validate user-supplied data.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts will result in a denial-of-service condition.

These issues affect versions prior to:

Firefox 3.6.11
Thunderbird 3.1.5

NOTE: These issues were previously discussed in 44228 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2010-64/65/66/67/68/69/71/72 Multiple Vulnerabilities) but have been given their own record to better document them.


 

Privacy Statement
Copyright 2010, SecurityFocus