CVE-2010-3766
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and...
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
Exploit likelihood
What each source reports
NVD Score used
9.3
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
- Record
CVE-2010-3766- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
- Record
CVE-2010-3766- Updated
- 2026-11-02
EUVDEUVD-2010-3745 No score
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
- Record
EUVD-2010-3745- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cj8f-6h68-j44p No score
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and...
Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.
- Record
GHSA-cj8f-6h68-j44p- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:3.6.13-3.el4 | 0:3.6.13-3.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
Show 30 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:3.6.13-2.el5 | 0:3.6.13-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:3.6.13-2.el5 | 0:3.6.13-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:3.6.13-2.el5 | 0:3.6.13-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:3.6.13-2.el5 | 0:3.6.13-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el5 | 0:1.9.2.13-3.el5 |
xulrunnerRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
xulrunnerRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunnerRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
xulrunnerRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
xulrunner-develRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:1.9.2.13-3.el6_0 | 0:1.9.2.13-3.el6_0 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs |
before 0:3.6.13-2.el6_0 | 0:3.6.13-2.el6_0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3766 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published December 10, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.00%, the 94th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html
lists.fedoraproject.org/pipermail/package-announce/2010-December/052022.html
mandriva.com/security/advisories?name=MDVSA-2010:251
support.avaya.com/css/P8/documents/100124650
redhat.com/support/errata/RHSA-2010-0966.html
ubuntu.com/usn/USN-1019-1
Show 194 moreShow less
secunia.com/advisories/42818
securityfocus.com/bid/45326
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12649
zerodayinitiative.com/advisories/ZDI-10-264
securitytracker.com/id?1024848
lists.fedoraproject.org/pipermail/package-announce/2010-December/052504.html
vupen.com/english/advisories/2011/0030
lists.fedoraproject.org/pipermail/package-announce/2010-December/052502.html
mozilla.org/security/announce/2010/mfsa2010-80.html
secunia.com/advisories/42716
bugzilla.mozilla.org/show_bug.cgi?id=590771
lists.fedoraproject.org/pipermail/package-announce/2010-December/052032.html
nvd.nist.gov/vuln/detail/CVE-2010-3766
github.com/advisories/GHSA-cj8f-6h68-j44p
access.redhat.com/errata/RHSA-2010:0966
access.redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox36.html
code.google.com/p/ots
bugzilla.redhat.com/show_bug.cgi?id=660408
bugzilla.redhat.com/show_bug.cgi?id=660415
bugzilla.redhat.com/show_bug.cgi?id=660417
bugzilla.redhat.com/show_bug.cgi?id=660419
bugzilla.redhat.com/show_bug.cgi?id=660420
bugzilla.redhat.com/show_bug.cgi?id=660422
bugzilla.redhat.com/show_bug.cgi?id=660429
bugzilla.redhat.com/show_bug.cgi?id=660431
bugzilla.redhat.com/show_bug.cgi?id=660435
bugzilla.redhat.com/show_bug.cgi?id=660438
bugzilla.redhat.com/show_bug.cgi?id=660439
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0966.json
access.redhat.com/security/cve/CVE-2010-3766
cve.org/CVERecord?id=CVE-2010-3766
access.redhat.com/security/cve/CVE-2010-3767
cve.org/CVERecord?id=CVE-2010-3767
nvd.nist.gov/vuln/detail/CVE-2010-3767
access.redhat.com/security/cve/CVE-2010-3768
cve.org/CVERecord?id=CVE-2010-3768
nvd.nist.gov/vuln/detail/CVE-2010-3768
access.redhat.com/security/cve/CVE-2010-3770
cve.org/CVERecord?id=CVE-2010-3770
nvd.nist.gov/vuln/detail/CVE-2010-3770
access.redhat.com/security/cve/CVE-2010-3771
cve.org/CVERecord?id=CVE-2010-3771
nvd.nist.gov/vuln/detail/CVE-2010-3771
access.redhat.com/security/cve/CVE-2010-3772
cve.org/CVERecord?id=CVE-2010-3772
nvd.nist.gov/vuln/detail/CVE-2010-3772
access.redhat.com/security/cve/CVE-2010-3773
cve.org/CVERecord?id=CVE-2010-3773
nvd.nist.gov/vuln/detail/CVE-2010-3773
access.redhat.com/security/cve/CVE-2010-3774
cve.org/CVERecord?id=CVE-2010-3774
nvd.nist.gov/vuln/detail/CVE-2010-3774
access.redhat.com/security/cve/CVE-2010-3775
cve.org/CVERecord?id=CVE-2010-3775
nvd.nist.gov/vuln/detail/CVE-2010-3775
access.redhat.com/security/cve/CVE-2010-3776
cve.org/CVERecord?id=CVE-2010-3776
nvd.nist.gov/vuln/detail/CVE-2010-3776
access.redhat.com/security/cve/CVE-2010-3777
cve.org/CVERecord?id=CVE-2010-3777
nvd.nist.gov/vuln/detail/CVE-2010-3777
suse.com/security/cve/CVE-2008-5913
suse.com/security/cve/CVE-2009-0040
suse.com/security/cve/CVE-2009-0771
suse.com/security/cve/CVE-2009-0772
suse.com/security/cve/CVE-2009-0773
suse.com/security/cve/CVE-2009-0774
suse.com/security/cve/CVE-2009-0776
suse.com/security/cve/CVE-2009-1044
suse.com/security/cve/CVE-2009-1169
suse.com/security/cve/CVE-2009-1571
suse.com/security/cve/CVE-2009-3388
suse.com/security/cve/CVE-2009-3389
suse.com/security/cve/CVE-2009-3555
suse.com/security/cve/CVE-2009-3979
suse.com/security/cve/CVE-2009-3980
suse.com/security/cve/CVE-2009-3982
suse.com/security/cve/CVE-2009-3983
suse.com/security/cve/CVE-2009-3984
suse.com/security/cve/CVE-2009-3985
suse.com/security/cve/CVE-2009-3988
suse.com/security/cve/CVE-2010-0159
suse.com/security/cve/CVE-2010-0160
suse.com/security/cve/CVE-2010-0162
suse.com/security/cve/CVE-2010-0173
suse.com/security/cve/CVE-2010-0174
suse.com/security/cve/CVE-2010-0175
suse.com/security/cve/CVE-2010-0176
suse.com/security/cve/CVE-2010-0177
suse.com/security/cve/CVE-2010-0178
suse.com/security/cve/CVE-2010-0179
suse.com/security/cve/CVE-2010-0181
suse.com/security/cve/CVE-2010-0182
suse.com/security/cve/CVE-2010-0183
suse.com/security/cve/CVE-2010-0654
suse.com/security/cve/CVE-2010-1121
suse.com/security/cve/CVE-2010-1125
suse.com/security/cve/CVE-2010-1196
suse.com/security/cve/CVE-2010-1197
suse.com/security/cve/CVE-2010-1198
suse.com/security/cve/CVE-2010-1199
suse.com/security/cve/CVE-2010-1200
suse.com/security/cve/CVE-2010-1201
suse.com/security/cve/CVE-2010-1202
suse.com/security/cve/CVE-2010-1203
suse.com/security/cve/CVE-2010-1205
suse.com/security/cve/CVE-2010-1206
suse.com/security/cve/CVE-2010-1208
suse.com/security/cve/CVE-2010-1209
suse.com/security/cve/CVE-2010-1211
suse.com/security/cve/CVE-2010-1212
suse.com/security/cve/CVE-2010-1213
suse.com/security/cve/CVE-2010-1214
suse.com/security/cve/CVE-2010-1585
suse.com/security/cve/CVE-2010-2751
suse.com/security/cve/CVE-2010-2752
suse.com/security/cve/CVE-2010-2753
suse.com/security/cve/CVE-2010-2754
suse.com/security/cve/CVE-2010-2760
suse.com/security/cve/CVE-2010-2763
suse.com/security/cve/CVE-2010-2764
suse.com/security/cve/CVE-2010-2765
suse.com/security/cve/CVE-2010-2766
suse.com/security/cve/CVE-2010-2767
suse.com/security/cve/CVE-2010-2768
suse.com/security/cve/CVE-2010-2769
suse.com/security/cve/CVE-2010-3166
suse.com/security/cve/CVE-2010-3167
suse.com/security/cve/CVE-2010-3168
suse.com/security/cve/CVE-2010-3169
suse.com/security/cve/CVE-2010-3170
suse.com/security/cve/CVE-2010-3173
suse.com/security/cve/CVE-2010-3174
suse.com/security/cve/CVE-2010-3175
suse.com/security/cve/CVE-2010-3176
suse.com/security/cve/CVE-2010-3177
suse.com/security/cve/CVE-2010-3178
suse.com/security/cve/CVE-2010-3179
suse.com/security/cve/CVE-2010-3180
suse.com/security/cve/CVE-2010-3182
suse.com/security/cve/CVE-2010-3183
suse.com/security/cve/CVE-2010-3765
suse.com/security/cve/CVE-2010-3766
suse.com/security/cve/CVE-2010-3767
suse.com/security/cve/CVE-2010-3768
suse.com/security/cve/CVE-2010-3769
suse.com/security/cve/CVE-2010-3770
suse.com/security/cve/CVE-2010-3771
suse.com/security/cve/CVE-2010-3772
suse.com/security/cve/CVE-2010-3773
suse.com/security/cve/CVE-2010-3775
suse.com/security/cve/CVE-2010-3776
suse.com/security/cve/CVE-2010-3777
suse.com/security/cve/CVE-2010-3778
suse.com/security/cve/CVE-2011-0051
suse.com/security/cve/CVE-2011-0053
suse.com/security/cve/CVE-2011-0054
suse.com/security/cve/CVE-2011-0055
suse.com/security/cve/CVE-2011-0056
suse.com/security/cve/CVE-2011-0057
suse.com/security/cve/CVE-2011-0059
suse.com/security/cve/CVE-2011-0061
suse.com/security/cve/CVE-2011-0062
suse.com/security/cve/CVE-2011-0084
suse.com/security/cve/CVE-2011-1187
suse.com/security/cve/CVE-2011-2366
suse.com/security/cve/CVE-2011-2367
suse.com/security/cve/CVE-2011-2368
suse.com/security/cve/CVE-2011-2369
suse.com/security/cve/CVE-2011-2370
suse.com/security/cve/CVE-2011-2371
suse.com/security/cve/CVE-2011-2372
suse.com/security/cve/CVE-2011-2373
suse.com/security/cve/CVE-2011-2374
suse.com/security/cve/CVE-2011-2375
suse.com/security/cve/CVE-2011-2377
suse.com/security/cve/CVE-2011-2985
suse.com/security/cve/CVE-2011-2986
suse.com/security/cve/CVE-2011-2988
suse.com/security/cve/CVE-2011-2989
suse.com/security/cve/CVE-2011-2990
suse.com/security/cve/CVE-2011-2991
suse.com/security/cve/CVE-2011-2992
suse.com/security/cve/CVE-2011-2993
suse.com/security/cve/CVE-2011-2995
suse.com/security/cve/CVE-2011-2996
suse.com/security/cve/CVE-2011-2997
suse.com/security/cve/CVE-2011-3000
suse.com/security/cve/CVE-2011-3001
suse.com/security/cve/CVE-2011-3002
suse.com/security/cve/CVE-2011-3003
suse.com/security/cve/CVE-2011-3004
suse.com/security/cve/CVE-2011-3005
Left out here: 445 references. The JSON record has them.