Security Advisory

CVE-2010-1209

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-07-30 20:00:00

Last updated 2024-08-07 01:14:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.

← Browse all CVEs View on cve.org ↗