CVE-2010-2759

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-16 · updated 2026-06-16
Weakness: CWE-189

Description

Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticated users to cause a denial of service (bug invisibility) via a crafted comment.

Affected products

Mozilla Bugzilla: 2.4, 2.6, 2.8, 2.9, 2.23.1, 2.23.2 (+46)

References

http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
http://secunia.com/advisories/40892
http://secunia.com/advisories/41128
http://www.bugzilla.org/security/3.2.7/
http://www.securityfocus.com/bid/42275
http://www.vupen.com/english/advisories/2010/2035
http://www.vupen.com/english/advisories/2010/2205
https://bugzilla.mozilla.org/show_bug.cgi?id=583690
https://bugzilla.redhat.com/show_bug.cgi?id=623423
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html

Get alerted when CVE-2010-2759 or the next vulnerability affects your stack