CVE-2010-2769
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9,...
4.3 Medium
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
Exploit likelihood
2.07%Down 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
- Record
CVE-2010-2769- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
- Record
CVE-2010-2769- Updated
- 2026-11-02
EUVDEUVD-2010-2773 No score
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
- Record
EUVD-2010-2773- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jq4r-vpvf-39g8 No score
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9,...
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
- Record
GHSA-jq4r-vpvf-39g8- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 10 CVEs |
before 1.9.0.19-4, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 18 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.19-11.9.0.19-21.9.0.19-31.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.19-4 |
xulrunnerDebian:5.0 From an advisory covering 10 CVEs |
before 1.9.0.19-6, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 20 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.19-11.9.0.19-21.9.0.19-31.9.0.19-41.9.0.19-51.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.19-6 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
nsprRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-develRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nssRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-develRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
Show 63 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nss-toolsRed Hat:enterprise_linux:4::as From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
nsprRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-develRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nssRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-develRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-toolsRed Hat:enterprise_linux:4::desktop From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
nsprRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-develRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nssRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-develRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-toolsRed Hat:enterprise_linux:4::es From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.6.9-1.el4 | 0:3.6.9-1.el4 |
nsprRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nspr-develRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:4.8.6-1.el4 | 0:4.8.6-1.el4 |
nssRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-develRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nss-toolsRed Hat:enterprise_linux:4::ws From an advisory covering 12 CVEs |
before 0:3.12.7-1.el4 | 0:3.12.7-1.el4 |
nsprRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nspr-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nspr-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nssRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.6.9-2.el5 | 0:3.6.9-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.6.9-2.el5 | 0:3.6.9-2.el5 |
nsprRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nspr-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nssRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-toolsRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.6.9-2.el5 | 0:3.6.9-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.6.9-2.el5 | 0:3.6.9-2.el5 |
nsprRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nspr-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nspr-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:4.8.6-1.el5 | 0:4.8.6-1.el5 |
nssRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
nss-toolsRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:3.12.7-2.el5 | 0:3.12.7-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 0:1.9.2.9-1.el5 | 0:1.9.2.9-1.el5 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2769 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published September 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. No source names a fixed version.
References
mozilla.org/security/announce/2010/mfsa2010-62.html
lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html
blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox
lists.fedoraproject.org/pipermail/package-announce/2010-September/047282.html
support.avaya.com/css/P8/documents/100112690
securityfocus.com/bid/43106
Show 194 moreShow less
secunia.com/advisories/42867
vupen.com/english/advisories/2011/0061
mandriva.com/security/advisories?name=MDVSA-2010:173
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12192
debian.org/security/2010/dsa-2106
bugzilla.mozilla.org/show_bug.cgi?id=520189
nvd.nist.gov/vuln/detail/CVE-2010-2769
github.com/advisories/GHSA-jq4r-vpvf-39g8
access.redhat.com/errata/RHSA-2010:0681
bugzilla.redhat.com/show_bug.cgi?id=630055
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0681.json
cve.org/CVERecord?id=CVE-2010-2760
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 1,965 references. The JSON record has them.