The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2010-09-09 19:00
Updated : 2024-02-04 17:54
NVD link : CVE-2010-2766
Mitre link : CVE-2010-2766
CVE.ORG link : CVE-2010-2766
JSON object : View
Products Affected
mozilla
- firefox
- seamonkey
- thunderbird
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')