Detections
Analytics
Mozilla SeaMonkey 2.0.x < 2.0.10 Buffer Overflow Vulnerability
high Log Correlation Engine Plugin ID 801269
Synopsis
The remote host has a web browser installed that is vulnerable to a buffer overflow attack.Description
Versions of SeaMonkey 2.0.x earlier than 2.0.10 are potentially affected by a buffer overflow vulnerability when mixing 'document.write()' and DOM insertions. (MFSA 2010-73)Solution
Upgrade to SeaMonkey 2.0.10 or later.See Also
http://.mozilla.org/security/known-vulnerabilities/seamonkey20.html#seamonkey2.0.10
Plugin Details
Severity: High
ID: 801269
Family: Web Clients
Published: 10/28/2010
Nessus ID: 50386
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
Patch Publication Date: 10/27/2010
Vulnerability Publication Date: 10/26/2010
Exploitable With
CANVAS (CANVAS)
Metasploit (Mozilla Firefox Interleaving document.write and appendChild Exploit)
Reference Information
CVE: CVE-2010-3765
BID: 44425