The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2010-09-09T18:00:00

Updated: 2017-09-18T12:57:01

Reserved: 2010-07-14T00:00:00


Link: CVE-2010-2766

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2010-09-09T19:00:02.437

Modified: 2017-09-19T01:31:07.517


Link: CVE-2010-2766

JSON object: View

cve-icon Redhat Information

No data.

CWE