Mozilla Firefox XSLT Node Sorting Routine Integer Overflow Vulnerability

  Severity: CRITICAL
  CVE Identifier: CVE-2010-1199
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004391
  Trend Micro Deep Security DPI Rule Name: 1004391 - Mozilla Firefox XSLT Node Sorting Routine Integer Overflow Vulnerability

  AFFECTED SOFTWARE AND VERSION

  • Mozilla Firefox 3.5
  • Mozilla Firefox 3.5.1
  • Mozilla Firefox 3.5.2
  • Mozilla Firefox 3.5.3
  • Mozilla Firefox 3.5.4
  • Mozilla Firefox 3.5.5
  • Mozilla Firefox 3.5.6
  • Mozilla Firefox 3.5.7
  • Mozilla Firefox 3.5.9
  • Mozilla Firefox 3.6
  • Mozilla Firefox 3.6.2
  • Mozilla Firefox 3.6.3
  • Mozilla Seamonkey 1.0
  • Mozilla Seamonkey 1.0.1
  • Mozilla Seamonkey 1.0.2
  • Mozilla Seamonkey 1.0.3
  • Mozilla Seamonkey 1.0.4
  • Mozilla Seamonkey 1.0.5
  • Mozilla Seamonkey 1.0.6
  • Mozilla Seamonkey 1.0.7
  • Mozilla Thunderbird 1.5.0.13
  • Mozilla Thunderbird 1.5.0.14
  • Mozilla Thunderbird 1.5.0.2
  • Mozilla Thunderbird 1.5.0.4
  • Mozilla Thunderbird 1.5.0.5
  • Mozilla Thunderbird 1.5.0.7
  • Mozilla Thunderbird 1.5.0.8
  • Mozilla Thunderbird 1.5.0.9
  • Mozilla Thunderbird 2.0.0.0
  • Mozilla Thunderbird 2.0.0.12
  • Mozilla Thunderbird 2.0.0.14
  • Mozilla Thunderbird 2.0.0.16
  • Mozilla Thunderbird 2.0.0.17
  • Mozilla Thunderbird 2.0.0.18
  • Mozilla Thunderbird 2.0.0.19
  • Mozilla Thunderbird 2.0.0.4
  • Mozilla Thunderbird 2.0.0.5
  • Mozilla Thunderbird 2.0.0.6
  • Mozilla Thunderbird 2.0.0.9
  • Mozilla Thunderbird 3.0
  • Mozilla Thunderbird 3.0.1
  • Mozilla Thunderbird 3.0.2
  • Mozilla Thunderbird 3.0.3
  • Mozilla Thunderbird 3.0.4
  • Mozilla Seamonkey 1.0.8
  • Mozilla Seamonkey 1.0.9
  • Mozilla Seamonkey 1.1
  • Mozilla Seamonkey 1.1.1
  • Mozilla Seamonkey 1.1.10
  • Mozilla Seamonkey 1.1.11
  • Mozilla Seamonkey 1.1.12
  • Mozilla Seamonkey 1.1.13
  • Mozilla Seamonkey 1.1.14
  • Mozilla Seamonkey 1.1.15
  • Mozilla Seamonkey 1.1.16
  • Mozilla Seamonkey 1.1.17
  • Mozilla Seamonkey 1.1.18
  • Mozilla Seamonkey 1.1.19
  • Mozilla Seamonkey 1.1.2
  • Mozilla Seamonkey 1.1.3
  • Mozilla Seamonkey 1.1.4
  • Mozilla Seamonkey 1.1.5
  • Mozilla Seamonkey 1.1.6
  • Mozilla Seamonkey 1.1.7
  • Mozilla Seamonkey 1.1.8
  • Mozilla Seamonkey 1.1.9
  • Mozilla Seamonkey 2.0
  • Mozilla Seamonkey 2.0.1
  • Mozilla Seamonkey 2.0.2
  • Mozilla Seamonkey 2.0.3
  • Mozilla Seamonkey 2.0.4
  • Mozilla Thunderbird 0.1
  • Mozilla Thunderbird 0.2
  • Mozilla Thunderbird 0.3
  • Mozilla Thunderbird 0.4
  • Mozilla Thunderbird 0.5
  • Mozilla Thunderbird 0.6
  • Mozilla Thunderbird 0.7
  • Mozilla Thunderbird 0.8
  • Mozilla Thunderbird 0.9
  • Mozilla Thunderbird 1.0
  • Mozilla Thunderbird 1.0.2
  • Mozilla Thunderbird 1.0.5
  • Mozilla Thunderbird 1.0.6
  • Mozilla Thunderbird 1.0.7
  • Mozilla Thunderbird 1.0.8
  • Mozilla Thunderbird 1.5
  • Mozilla Thunderbird 1.5.0.10
  • Mozilla Thunderbird 1.5.0.12

Featured Stories