CVE-2010-1199

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

11.42% chance of exploitation in the next 30 days, 96th percentile

Published

2010-06-23

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/14949

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/34192
• https://www.exploit-db.com/exploits/14949

Security advisories

• http://www.mozilla.org/security/announce/2010/mfsa2010-30.html
• http://ubuntu.com/usn/usn-930-1
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:125
• http://www.redhat.com/support/errata/RHSA-2010-0499.html
• http://www.redhat.com/support/errata/RHSA-2010-0500.html
• http://www.redhat.com/support/errata/RHSA-2010-0501.html
• http://www.securityfocus.com/bid/41050
• http://www.securityfocus.com/bid/41082
• http://www.ubuntu.com/usn/usn-930-2

References

• CVE Record
• NVD entry