CVE-2010-2752 Integer overflow in n/a
Remote attackers can execute arbitrary code via integer overflow in CSS array handling, requiring user interaction to visit a malicious page.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-2752?
CVE-2010-2752 is a critical vulnerability in Mozilla Firefox, published on 30 Jul 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
Weakness: CWE-189
Which versions are affected by CVE-2010-2752?
It affects 3 products.
Products include Mozilla Firefox, Mozilla Seamonkey, Mozilla Thunderbird.
How do I fix CVE-2010-2752?
Upgrade to a fixed version.
Is CVE-2010-2752 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-2752 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-p77q-96cj-c83q.