Mozilla Firefox/Thunderbird/SeaMonkey CSS Values Integer Overflow Vulnerability
Publish Date: 21 luglio 2015
Gravità: : Critico
Identificatori CVE: CVE-2010-2752
Data notifica: 21 luglio 2015
Descrizione
Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
Informazioni esposizione:
Apply associated Trend Micro DPI Rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1004441
Trend Micro Deep Security DPI Rule Name: 1004441 - Mozilla Firefox Crafted Font Remote Code Execution Vulnerability
Software e versione interessati:
- mozilla firefox 3.5.1
- mozilla firefox 3.5.10
- mozilla firefox 3.5.2
- mozilla firefox 3.5.3
- mozilla firefox 3.5.4
- mozilla firefox 3.5.5
- mozilla firefox 3.5.6
- mozilla firefox 3.5.7
- mozilla firefox 3.5.9
- mozilla firefox 3.6.1
- mozilla firefox 3.6.2
- mozilla firefox 3.6.3
- mozilla firefox 3.6.4
- mozilla firefox 3.6.6
- mozilla seamonkey 1.0
- mozilla seamonkey 1.0.1
- mozilla seamonkey 1.0.2
- mozilla seamonkey 1.0.3
- mozilla seamonkey 1.0.4
- mozilla seamonkey 1.0.5
- mozilla seamonkey 1.0.6
- mozilla seamonkey 1.0.7
- mozilla seamonkey 1.0.8
- mozilla seamonkey 1.0.9
- mozilla seamonkey 1.1
- mozilla seamonkey 1.1.1
- mozilla seamonkey 1.1.10
- mozilla seamonkey 1.1.11
- mozilla seamonkey 1.1.12
- mozilla seamonkey 1.1.13
- mozilla seamonkey 1.1.14
- mozilla seamonkey 1.1.15
- mozilla seamonkey 1.1.16
- mozilla seamonkey 1.1.17
- mozilla seamonkey 1.1.18
- mozilla seamonkey 1.1.19
- mozilla seamonkey 1.1.2
- mozilla seamonkey 1.1.3
- mozilla seamonkey 1.1.4
- mozilla seamonkey 1.1.5
- mozilla seamonkey 1.1.6
- mozilla seamonkey 1.1.7
- mozilla seamonkey 1.1.8
- mozilla seamonkey 1.1.9
- mozilla seamonkey 1.5.0.10
- mozilla seamonkey 1.5.0.8
- mozilla seamonkey 1.5.0.9
- mozilla seamonkey 2.0
- mozilla seamonkey 2.0.1
- mozilla seamonkey 2.0.2
- mozilla seamonkey 2.0.3
- mozilla seamonkey 2.0.4
- mozilla seamonkey 2.0.5
- mozilla seamonkey 2.0a1pre
- mozilla thunderbird 3.0
- mozilla thunderbird 3.0.1
- mozilla thunderbird 3.0.2
- mozilla thunderbird 3.0.3
- mozilla thunderbird 3.0.4
- mozilla thunderbird 3.0.5
- mozilla thunderbird 3.1