Trend Micro Security

Mozilla Firefox/Thunderbird/SeaMonkey CSS Values Integer Overflow Vulnerability

2015年7月21日
  危険度: : 緊急
  CVE識別番号: CVE-2010-2752

  概要

Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1004441
  Trend Micro Deep Security DPI Rule Name: 1004441 - Mozilla Firefox Crafted Font Remote Code Execution Vulnerability

  影響を受けるソフトウェア

  • mozilla firefox 3.5.1
  • mozilla firefox 3.5.10
  • mozilla firefox 3.5.2
  • mozilla firefox 3.5.3
  • mozilla firefox 3.5.4
  • mozilla firefox 3.5.5
  • mozilla firefox 3.5.6
  • mozilla firefox 3.5.7
  • mozilla firefox 3.5.9
  • mozilla firefox 3.6.1
  • mozilla firefox 3.6.2
  • mozilla firefox 3.6.3
  • mozilla firefox 3.6.4
  • mozilla firefox 3.6.6
  • mozilla seamonkey 1.0
  • mozilla seamonkey 1.0.1
  • mozilla seamonkey 1.0.2
  • mozilla seamonkey 1.0.3
  • mozilla seamonkey 1.0.4
  • mozilla seamonkey 1.0.5
  • mozilla seamonkey 1.0.6
  • mozilla seamonkey 1.0.7
  • mozilla seamonkey 1.0.8
  • mozilla seamonkey 1.0.9
  • mozilla seamonkey 1.1
  • mozilla seamonkey 1.1.1
  • mozilla seamonkey 1.1.10
  • mozilla seamonkey 1.1.11
  • mozilla seamonkey 1.1.12
  • mozilla seamonkey 1.1.13
  • mozilla seamonkey 1.1.14
  • mozilla seamonkey 1.1.15
  • mozilla seamonkey 1.1.16
  • mozilla seamonkey 1.1.17
  • mozilla seamonkey 1.1.18
  • mozilla seamonkey 1.1.19
  • mozilla seamonkey 1.1.2
  • mozilla seamonkey 1.1.3
  • mozilla seamonkey 1.1.4
  • mozilla seamonkey 1.1.5
  • mozilla seamonkey 1.1.6
  • mozilla seamonkey 1.1.7
  • mozilla seamonkey 1.1.8
  • mozilla seamonkey 1.1.9
  • mozilla seamonkey 1.5.0.10
  • mozilla seamonkey 1.5.0.8
  • mozilla seamonkey 1.5.0.9
  • mozilla seamonkey 2.0
  • mozilla seamonkey 2.0.1
  • mozilla seamonkey 2.0.2
  • mozilla seamonkey 2.0.3
  • mozilla seamonkey 2.0.4
  • mozilla seamonkey 2.0.5
  • mozilla seamonkey 2.0a1pre
  • mozilla thunderbird 3.0
  • mozilla thunderbird 3.0.1
  • mozilla thunderbird 3.0.2
  • mozilla thunderbird 3.0.3
  • mozilla thunderbird 3.0.4
  • mozilla thunderbird 3.0.5
  • mozilla thunderbird 3.1