CVE-2010-1121

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-25 · updated 2026-06-16
Weakness: CWE-94

Description

Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.

Affected products

Mozilla Firefox: 3.6, 3.6.1, 3.6.2

References

http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html
http://news.cnet.com/8301-27080_3-20001126-245.html
http://secunia.com/advisories/40323
http://secunia.com/advisories/40326
http://secunia.com/advisories/40401
http://secunia.com/advisories/40481
http://support.avaya.com/css/P8/documents/100091069
http://twitter.com/thezdi/statuses/11005277222
http://ubuntu.com/usn/usn-930-1

Get alerted when CVE-2010-1121 or the next vulnerability affects your stack