Vulnerability · NVD
CVE-2010-2752
N/A
Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
EPSS
9.78%
above median
percentile 95.1%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
Vulnerable CPE configurations (7)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.0:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.0.3:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.0.4:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.0.5:*:*:*:*:*:*:* |
| mozilla |
thunderbird All platforms (wildcard)
|
All platforms (wildcard) | — | cpe:2.3:a:mozilla:thunderbird:3.1:*:*:*:*:*:*:* |