What’s Vulnerable › Vulnerabilities

CVE-2010-0176

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-04-05 · updated 2026-06-16
• Weakness: CWE-399

Description

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."

Affected products

• Mozilla Firefox: through 3.5.7; 3.6, 0.1, 0.2, 0.3, 0.4, 0.5 (+91)
• Mozilla Seamonkey: through 2.0.3; 1.0, 1.0-alpha, 1.0-beta, 1.0.1, 1.0.2, 1.0.3 (+39)
• Mozilla Thunderbird: through 3.0.3; 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+55)

References

• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://secunia.com/advisories/38566
• http://secunia.com/advisories/39117
• http://secunia.com/advisories/39136
• http://secunia.com/advisories/39204
• http://secunia.com/advisories/39240
• http://secunia.com/advisories/39242
• http://secunia.com/advisories/39243
• http://secunia.com/advisories/39308

Get alerted when CVE-2010-0176 or the next vulnerability affects your stack