CVE-2010-0175
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0...
9.3 High
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
Exploit likelihood
7.00%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
- Record
CVE-2010-0175- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
- Record
CVE-2010-0175- Updated
- 2026-11-02
EUVDEUVD-2010-0206 No score
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
- Record
EUVD-2010-0206- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f74m-jmww-q4m2 No score
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0...
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
- Record
GHSA-f74m-jmww-q4m2- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 6 CVEs |
before 1.9.0.19-1, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 15 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.19-1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.19-1.el4 | 0:3.0.19-1.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
Show 98 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.19-1.el5_5 | 0:3.0.19-1.el5_5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.19-1.el5_5 | 0:3.0.19-1.el5_5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.19-1.el5_5 | 0:3.0.19-1.el5_5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.19-1.el5_5 | 0:3.0.19-1.el5_5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.19-1.el5_5 | 0:1.9.0.19-1.el5_5 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.52.el3 | 0:1.0.9-0.52.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-54.el4_8 | 0:1.0.9-54.el4_8 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:1.5.0.12-28.el4 | 0:1.5.0.12-28.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 13 CVEs |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 13 CVEs |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0175 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published April 3, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.00%, the 94th percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=375928
secunia.com/advisories/39397
redhat.com/support/errata/RHSA-2010-0333.html
vupen.com/english/advisories/2010/0781
Show 194 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
ubuntu.com/usn/usn-921-1
mozilla.org/security/announce/2010/mfsa2010-17.html
securitytracker.com/id?1023782
lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
zerodayinitiative.com/advisories/ZDI-10-050
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546
exchange.xforce.ibmcloud.com/vulnerabilities/57390
mandriva.com/security/advisories?name=MDVSA-2010:070
securityfocus.com/archive/1/510542/100/0/threaded
debian.org/security/2010/dsa-2027
nvd.nist.gov/vuln/detail/CVE-2010-0175
github.com/advisories/GHSA-f74m-jmww-q4m2
access.redhat.com/errata/RHSA-2010:0332
bugzilla.redhat.com/show_bug.cgi?id=578147
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0332.json
cve.org/CVERecord?id=CVE-2010-0174
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 628 references. The JSON record has them.