Every CVESearch/Get API key

CVE-2010-2755

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the...

10.0 HighFix available

CVE-2010-2755 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published July 29, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.13%, the 90th percentile. Fixed in xulrunner 0:1.9.2.7-3.el5.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
4.13%EPSS, 90th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0:1.9.2.7-3.el5xulrunner +93 more

Description

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

Exploit likelihood

4.13%Down 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xulrunner
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
firefox
Red Hat:enterprise_linux:5::client
before 0:3.6.7-3.el5
0:3.6.7-3.el5
firefox-debuginfo
Red Hat:enterprise_linux:5::client
before 0:3.6.7-3.el5
0:3.6.7-3.el5
xulrunner
Red Hat:enterprise_linux:5::client
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
firefox
Red Hat:enterprise_linux:5::server
before 0:3.6.7-3.el5
0:3.6.7-3.el5
firefox-debuginfo
Red Hat:enterprise_linux:5::server
before 0:3.6.7-3.el5
0:3.6.7-3.el5
xulrunner
Red Hat:enterprise_linux:5::server
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
Show 84 moreShow less
Affected packages
PackageAffectedFixed
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
xulrunner-devel
Red Hat:enterprise_linux:5::server
before 0:1.9.2.7-3.el5
0:1.9.2.7-3.el5
seamonkey
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-chat
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-mail
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-chat
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-mail
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-chat
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-mail
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-chat
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-mail
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.58.el3
0:1.0.9-0.58.el3
seamonkey
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-chat
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-devel
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-mail
Red Hat:enterprise_linux:4::as
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-chat
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-devel
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-mail
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-chat
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-devel
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-mail
Red Hat:enterprise_linux:4::es
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-chat
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-devel
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-js-debugger
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
seamonkey-mail
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-61.el4
0:1.0.9-61.el4
firefox
Red Hat:enterprise_linux:4::as
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::as
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox
Red Hat:enterprise_linux:4::desktop
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox
Red Hat:enterprise_linux:4::es
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::es
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox
Red Hat:enterprise_linux:4::ws
before 0:3.6.7-3.el4
0:3.6.7-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:3.6.7-3.el4
0:3.6.7-3.el4
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 899 CVEs
before 50.1.0-1.1
50.1.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
before 128.5.1-1.1
128.5.1-1.1

What each source reports

NVD Score used10.0

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

Record
CVE-2010-2755
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

Record
CVE-2010-2755
Updated
2026-11-02
EUVDEUVD-2010-2759No score

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

Record
EUVD-2010-2759
Updated
2026-11-03
GitHub AdvisoriesGHSA-fwcv-j34v-fh3mNo score

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the...

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

Record
GHSA-fwcv-j34v-fh3m
Updated
2026-11-02
OSVopenSUSE-SU-2024:10071-1No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,870 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open