2010-09-09 21:00:02 2017-09-19 03:31:07

Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols (aka columns) attribute, leading to a heap-based buffer overflow.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Mozilla SeaMonkey 2.0 Alpha 3 Mozilla Thunderbird 0.1 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla Firefox 3.5.3 Mozilla SeaMonkey 1.0.6 Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 1.0 alpha Mozilla SeaMonkey 1.1 alpha Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 1.0.4 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 1.0.7 Mozilla SeaMonkey 2.0.6 Mozilla Thunderbird 1.5 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.13 Mozilla Firefox 3.0.1 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.12 Mozilla Firefox 3.0.6 Mozilla Firefox 3.0.15 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla Firefox 1.5.0.6 Mozilla Firefox 3.0.8 Mozilla Firefox 3.0.17 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.14 Mozilla Thunderbird 1.0 Mozilla Firefox 1.5.0.4 Mozilla Firefox 3.0.2 Mozilla Firefox 3.0.11 Mozilla Firefox 1.5.0.7 Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.16 Mozilla Firefox 1.5 Beta 1 Mozilla Firefox 1.5 Beta 2 Mozilla Firefox 2.0.0.10 Mozilla Firefox 3.0 Mozilla Firefox 1.5.0.2 Mozilla Firefox 3.0.9 Mozilla SeaMonkey 2.0 RC2 Mozilla Firefox 1.5.0.3 Mozilla Firefox 1.5.0.1 Mozilla SeaMonkey 2.0 RC1 Mozilla Firefox 2.0.0.13 Mozilla Firefox 3.5 Mozilla Firefox 2.0.0.11 Mozilla Firefox 2.0.0.14 Mozilla Firefox 3.6 Mozilla Firefox 2.0.0.17 Mozilla Firefox 2.0.0.12 Mozilla Firefox 2.0.0.15 Mozilla Firefox 2.0.0.18 Mozilla Firefox 2.0.0.16 Mozilla Firefox 1.5.0.12 Mozilla Firefox 2.0.0.20 Mozilla Thunderbird 2.0.0.18 Mozilla Thunderbird 2.0.0.17 Mozilla Thunderbird 2.0.0.12 Mozilla Thunderbird 2.0.0.14 Mozilla Firefox 1.5.0.11 Mozilla Firefox 2.0.0.19 Mozilla Thunderbird 2.0.0.5 Mozilla Thunderbird 2.0.0.4 Mozilla Thunderbird 2.0.0.7 Mozilla Thunderbird 2.0.0.6 Mozilla Thunderbird 2.0.0.1 Mozilla Thunderbird 2.0.0.0 Mozilla Thunderbird 2.0.0.3 Mozilla Thunderbird 2.0.0.2 Mozilla SeaMonkey 1.1.17 Mozilla Seamonkey 1.1.18 Mozilla Seamonkey 1.1.19 Mozilla Firefox 1.5.0.10 Mozilla Thunderbird 2.0.0.16 Mozilla Thunderbird 1.5.0.10 Mozilla Firefox 1.5.0.5 Mozilla Firefox 1.5.0.8 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 1.5.0.14 Mozilla Firefox 1.5.0.9 Mozilla Thunderbird 1.5.0.11 Mozilla Thunderbird 1.5.0.13 Mozilla Thunderbird 1.5.0.12 Mozilla Thunderbird 1.5.0.1 Mozilla Thunderbird 1.5.0.3 Mozilla Thunderbird 1.5.0.2 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 3.0.4 Mozilla Firefox 1.5.7 Mozilla Thunderbird 3.0.3 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.2 Mozilla Firefox 2.0.0.2 Mozilla Firefox 1.5.6 Mozilla Firefox 1.5.8 Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.6 Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.4 Mozilla SeaMonkey 1.1.13 Mozilla Firefox 2.0.0.7 Mozilla SeaMonkey 1.1.14 Mozilla Thunderbird 2.0.0.19 Mozilla SeaMonkey 1.1.15 Mozilla Firefox 2.0.0.5 Mozilla SeaMonkey 1.1.16 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 1.1.11 Mozilla Firefox 1.0 Preview Release Mozilla SeaMonkey 1.1.12 Mozilla Thunderbird 2.0.0.23 Mozilla Thunderbird 2.0.0.22 Mozilla Seamonkey 1.1.4 Mozilla Seamonkey 1.1.5 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla Seamonkey 1.1.1 Mozilla Firefox 1.5 Mozilla Thunderbird 1.5.0.9 Mozilla Thunderbird 1.5.0.8 Mozilla SeaMonkey 1.1.8 Mozilla Thunderbird 2.0.0.21 Mozilla SeaMonkey 1.1.9 Mozilla Seamonkey 1.1.2 Mozilla Thunderbird 1.5.0.5 Mozilla Seamonkey 1.1.3 Mozilla Thunderbird 1.5.0.4 Mozilla Thunderbird 1.5.0.7 Mozilla Thunderbird 1.5.0.6 Mozilla Seamonkey 1.1.6 Mozilla Firefox 1.0 Mozilla Seamonkey 1.1.7 Mozilla SeaMonkey 1.1 beta Mozilla Firefox 3.5.6 Mozilla Thunderbird 0.7.3 Mozilla Firefox 3.5.4 Mozilla Thunderbird 0.7.1 Mozilla Firefox 3.5.7 Mozilla Thunderbird 0.7.2 Mozilla SeaMonkey 1.0 beta Mozilla SeaMonkey 2.0 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.8 Mozilla Thunderbird 1.5.2 Mozilla Thunderbird 2.0.0.9 Mozilla Thunderbird 2.0.0.8 Mozilla Thunderbird 1.5.1 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.9 Mozilla Seamonkey 2.0a1pre (not an official CPE) Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.1 Mozilla Firefox 3.5.2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla Thunderbird 0.4 Mozilla Thunderbird 0.5 Mozilla Firefox 3.5.1 Mozilla Thunderbird 0.2 Mozilla Thunderbird 0.3 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.8 Mozilla Thunderbird 0.8 Mozilla Thunderbird 0.9 Mozilla Thunderbird 0.6 Mozilla Thunderbird 0.7 Mozilla SeaMonkey 1.1 Mozilla Firefox 2.0.0.8 Mozilla Thunderbird 1.5 Beta 2 Mozilla Firefox 1.5.1 Mozilla Firefox 1.5.3 Mozilla SeaMonkey 1.0 Mozilla Firefox 1.5.4 Mozilla Firefox 1.5.2 Mozilla Firefox 1.5.5 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.3 Mozilla Firefox 3.6.2 Mozilla Thunderbird 3.1 Mozilla Thunderbird 3.0 Mozilla SeaMonkey 1.5.0.10 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.3 Mozilla Firefox 1.0.6 Mozilla Firefox 1.0.8 Mozilla Firefox 3.5.10 Mozilla Firefox 1.0.4 Mozilla Firefox 1.0.7 Mozilla Firefox 1.0.1 Mozilla Firefox 3.5.11 Mozilla Firefox 1.0.2 Mozilla Firefox 2.0 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.6 Mozilla Thunderbird 1.0.3 Mozilla Thunderbird 1.0.4 Mozilla Thunderbird 2.0 Mozilla Thunderbird 1.0.7 Mozilla Thunderbird 1.0.8 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0.2 Mozilla Firefox 2.0.0.9