CVE-2010-2752
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 9.8%
from disclosure to weapon57 days
Published on NVDJul 30
1st PoC+57d
exploitation probability
9.8%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/15104⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://bugzilla.mozilla.org/show_bug.cgi?id=574059https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11680http://www.mozilla.org/security/announce/2010/mfsa2010-39.htmlhttp://www.securityfocus.com/archive/1/512514http://www.securityfocus.com/bid/41852http://www.zerodayinitiative.com/advisories/ZDI-10-133/