Firefox < 3.6.3 Remote Code Execution Vulnerability

High Log Correlation Engine Plugin ID 800762


The remote host has a web browser installed that is vulnerable to a remote code execution attack.


The remote host is running a version of Mozilla Firefox 3.6.x earlier than 3.6.3. Such versions are potentially affected by a memory corruption flaw caused by the re-use of a freed object when moving DOM nodes between documents. A remote attacker, exploiting this flaw, could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.


Upgrade to Firefox 3.6.3 or later.

See Also

Plugin Details

Severity: High

ID: 800762

Family: Web Clients

Published: 2010/04/02

Nessus ID: 45403

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 6.8

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

Patch Publication Date: 2010/04/01

Vulnerability Publication Date: 2010/04/01

Reference Information

CVE: CVE-2010-1121

BID: 38952