The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2010-09-09T18:00:00

Updated: 2017-09-18T12:57:01

Reserved: 2010-08-27T00:00:00


Link: CVE-2010-3167

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2010-09-09T19:00:02.670

Modified: 2017-09-19T01:31:15.410


Link: CVE-2010-3167

JSON object: View

cve-icon Redhat Information

No data.