9.3

CVE-2010-3131

Exploit
Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .htm, .html, .jtx, .mfp, or .eml file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 3.6
Mozilla ≫ Firefox Version 3.6.2
Mozilla ≫ Firefox Version 3.6.3
Mozilla ≫ Firefox Version 3.6.4
Mozilla ≫ Firefox Version 3.6.6
Mozilla ≫ Firefox Version 3.6.7
Mozilla ≫ Firefox Version 3.6.8
Mozilla ≫ Seamonkey Version <= 2.0.6
Mozilla ≫ Seamonkey Version 1.0
Mozilla ≫ Seamonkey Version 1.0 Update alpha
Mozilla ≫ Seamonkey Version 1.0 Update beta
Mozilla ≫ Seamonkey Version 1.0.1
Mozilla ≫ Seamonkey Version 1.0.2
Mozilla ≫ Seamonkey Version 1.0.3
Mozilla ≫ Seamonkey Version 1.0.4
Mozilla ≫ Seamonkey Version 1.0.5
Mozilla ≫ Seamonkey Version 1.0.6
Mozilla ≫ Seamonkey Version 1.0.7
Mozilla ≫ Seamonkey Version 1.0.8
Mozilla ≫ Seamonkey Version 1.0.9
Mozilla ≫ Seamonkey Version 1.1
Mozilla ≫ Seamonkey Version 1.1 Update alpha
Mozilla ≫ Seamonkey Version 1.1 Update beta
Mozilla ≫ Seamonkey Version 1.1.1
Mozilla ≫ Seamonkey Version 1.1.2
Mozilla ≫ Seamonkey Version 1.1.3
Mozilla ≫ Seamonkey Version 1.1.4
Mozilla ≫ Seamonkey Version 1.1.5
Mozilla ≫ Seamonkey Version 1.1.6
Mozilla ≫ Seamonkey Version 1.1.7
Mozilla ≫ Seamonkey Version 1.1.8
Mozilla ≫ Seamonkey Version 1.1.9
Mozilla ≫ Seamonkey Version 1.1.10
Mozilla ≫ Seamonkey Version 1.1.11
Mozilla ≫ Seamonkey Version 1.1.12
Mozilla ≫ Seamonkey Version 1.1.13
Mozilla ≫ Seamonkey Version 1.1.14
Mozilla ≫ Seamonkey Version 1.1.15
Mozilla ≫ Seamonkey Version 1.1.16
Mozilla ≫ Seamonkey Version 1.1.17
Mozilla ≫ Seamonkey Version 1.1.18
Mozilla ≫ Seamonkey Version 1.1.19
Mozilla ≫ Seamonkey Version 1.5.0.8
Mozilla ≫ Seamonkey Version 1.5.0.9
Mozilla ≫ Seamonkey Version 1.5.0.10
Mozilla ≫ Seamonkey Version 2.0
Mozilla ≫ Seamonkey Version 2.0 Update alpha_1
Mozilla ≫ Seamonkey Version 2.0 Update alpha_2
Mozilla ≫ Seamonkey Version 2.0 Update alpha_3
Mozilla ≫ Seamonkey Version 2.0 Update beta_1
Mozilla ≫ Seamonkey Version 2.0 Update beta_2
Mozilla ≫ Seamonkey Version 2.0 Update rc1
Mozilla ≫ Seamonkey Version 2.0 Update rc2
Mozilla ≫ Seamonkey Version 2.0.1
Mozilla ≫ Seamonkey Version 2.0.2
Mozilla ≫ Seamonkey Version 2.0.3
Mozilla ≫ Seamonkey Version 2.0.4
Mozilla ≫ Seamonkey Version 2.0.5
Mozilla ≫ Seamonkey Version 2.0a1pre
Mozilla ≫ Thunderbird Version <= 3.0.6
Mozilla ≫ Thunderbird Version 0.1
Mozilla ≫ Thunderbird Version 0.2
Mozilla ≫ Thunderbird Version 0.3
Mozilla ≫ Thunderbird Version 0.4
Mozilla ≫ Thunderbird Version 0.5
Mozilla ≫ Thunderbird Version 0.6
Mozilla ≫ Thunderbird Version 0.7
Mozilla ≫ Thunderbird Version 0.7.1
Mozilla ≫ Thunderbird Version 0.7.2
Mozilla ≫ Thunderbird Version 0.7.3
Mozilla ≫ Thunderbird Version 0.8
Mozilla ≫ Thunderbird Version 0.9
Mozilla ≫ Thunderbird Version 1.0
Mozilla ≫ Thunderbird Version 1.0.1
Mozilla ≫ Thunderbird Version 1.0.2
Mozilla ≫ Thunderbird Version 1.0.3
Mozilla ≫ Thunderbird Version 1.0.4
Mozilla ≫ Thunderbird Version 1.0.5
Mozilla ≫ Thunderbird Version 1.0.6
Mozilla ≫ Thunderbird Version 1.0.7
Mozilla ≫ Thunderbird Version 1.0.8
Mozilla ≫ Thunderbird Version 1.5
Mozilla ≫ Thunderbird Version 1.5 Update beta2
Mozilla ≫ Thunderbird Version 1.5.0.1
Mozilla ≫ Thunderbird Version 1.5.0.2
Mozilla ≫ Thunderbird Version 1.5.0.3
Mozilla ≫ Thunderbird Version 1.5.0.4
Mozilla ≫ Thunderbird Version 1.5.0.5
Mozilla ≫ Thunderbird Version 1.5.0.6
Mozilla ≫ Thunderbird Version 1.5.0.7
Mozilla ≫ Thunderbird Version 1.5.0.8
Mozilla ≫ Thunderbird Version 1.5.0.9
Mozilla ≫ Thunderbird Version 1.5.0.10
Mozilla ≫ Thunderbird Version 1.5.0.11
Mozilla ≫ Thunderbird Version 1.5.0.12
Mozilla ≫ Thunderbird Version 1.5.0.13
Mozilla ≫ Thunderbird Version 1.5.0.14
Mozilla ≫ Thunderbird Version 1.5.1
Mozilla ≫ Thunderbird Version 1.5.2
Mozilla ≫ Thunderbird Version 2.0
Mozilla ≫ Thunderbird Version 2.0.0.0
Mozilla ≫ Thunderbird Version 2.0.0.1
Mozilla ≫ Thunderbird Version 2.0.0.2
Mozilla ≫ Thunderbird Version 2.0.0.3
Mozilla ≫ Thunderbird Version 2.0.0.4
Mozilla ≫ Thunderbird Version 2.0.0.5
Mozilla ≫ Thunderbird Version 2.0.0.6
Mozilla ≫ Thunderbird Version 2.0.0.7
Mozilla ≫ Thunderbird Version 2.0.0.8
Mozilla ≫ Thunderbird Version 2.0.0.9
Mozilla ≫ Thunderbird Version 2.0.0.12
Mozilla ≫ Thunderbird Version 2.0.0.14
Mozilla ≫ Thunderbird Version 2.0.0.16
Mozilla ≫ Thunderbird Version 2.0.0.17
Mozilla ≫ Thunderbird Version 2.0.0.18
Mozilla ≫ Thunderbird Version 2.0.0.19
Mozilla ≫ Thunderbird Version 2.0.0.21
Mozilla ≫ Thunderbird Version 2.0.0.22
Mozilla ≫ Thunderbird Version 2.0.0.23
Mozilla ≫ Thunderbird Version 3.0
Mozilla ≫ Thunderbird Version 3.0.1
Mozilla ≫ Thunderbird Version 3.0.2
Mozilla ≫ Thunderbird Version 3.0.3
Mozilla ≫ Thunderbird Version 3.0.4
Mozilla ≫ Thunderbird Version 3.0.5
Mozilla ≫ Thunderbird Version 3.1
Mozilla ≫ Thunderbird Version 3.1.1
Mozilla ≫ Thunderbird Version 3.1.2
Mozilla ≫ Firefox Version <= 3.5.11
Mozilla ≫ Firefox Version 1.0
Mozilla ≫ Firefox Version 1.0 Update preview_release
Mozilla ≫ Firefox Version 1.0.1
Mozilla ≫ Firefox Version 1.0.2
Mozilla ≫ Firefox Version 1.0.3
Mozilla ≫ Firefox Version 1.0.4
Mozilla ≫ Firefox Version 1.0.5
Mozilla ≫ Firefox Version 1.0.6
Mozilla ≫ Firefox Version 1.0.7
Mozilla ≫ Firefox Version 1.0.8
Mozilla ≫ Firefox Version 1.5
Mozilla ≫ Firefox Version 1.5 Update beta1
Mozilla ≫ Firefox Version 1.5 Update beta2
Mozilla ≫ Firefox Version 1.5.0.1
Mozilla ≫ Firefox Version 1.5.0.2
Mozilla ≫ Firefox Version 1.5.0.3
Mozilla ≫ Firefox Version 1.5.0.4
Mozilla ≫ Firefox Version 1.5.0.5
Mozilla ≫ Firefox Version 1.5.0.6
Mozilla ≫ Firefox Version 1.5.0.7
Mozilla ≫ Firefox Version 1.5.0.8
Mozilla ≫ Firefox Version 1.5.0.9
Mozilla ≫ Firefox Version 1.5.0.10
Mozilla ≫ Firefox Version 1.5.0.11
Mozilla ≫ Firefox Version 1.5.0.12
Mozilla ≫ Firefox Version 1.5.1
Mozilla ≫ Firefox Version 1.5.2
Mozilla ≫ Firefox Version 1.5.3
Mozilla ≫ Firefox Version 1.5.4
Mozilla ≫ Firefox Version 1.5.5
Mozilla ≫ Firefox Version 1.5.6
Mozilla ≫ Firefox Version 1.5.7
Mozilla ≫ Firefox Version 1.5.8
Mozilla ≫ Firefox Version 2.0
Mozilla ≫ Firefox Version 2.0.0.1
Mozilla ≫ Firefox Version 2.0.0.2
Mozilla ≫ Firefox Version 2.0.0.3
Mozilla ≫ Firefox Version 2.0.0.4
Mozilla ≫ Firefox Version 2.0.0.5
Mozilla ≫ Firefox Version 2.0.0.6
Mozilla ≫ Firefox Version 2.0.0.7
Mozilla ≫ Firefox Version 2.0.0.8
Mozilla ≫ Firefox Version 2.0.0.9
Mozilla ≫ Firefox Version 2.0.0.10
Mozilla ≫ Firefox Version 2.0.0.11
Mozilla ≫ Firefox Version 2.0.0.12
Mozilla ≫ Firefox Version 2.0.0.13
Mozilla ≫ Firefox Version 2.0.0.14
Mozilla ≫ Firefox Version 2.0.0.15
Mozilla ≫ Firefox Version 2.0.0.16
Mozilla ≫ Firefox Version 2.0.0.17
Mozilla ≫ Firefox Version 2.0.0.18
Mozilla ≫ Firefox Version 2.0.0.19
Mozilla ≫ Firefox Version 2.0.0.20
Mozilla ≫ Firefox Version 3.0
Mozilla ≫ Firefox Version 3.0.1
Mozilla ≫ Firefox Version 3.0.2
Mozilla ≫ Firefox Version 3.0.3
Mozilla ≫ Firefox Version 3.0.4
Mozilla ≫ Firefox Version 3.0.5
Mozilla ≫ Firefox Version 3.0.6
Mozilla ≫ Firefox Version 3.0.7
Mozilla ≫ Firefox Version 3.0.8
Mozilla ≫ Firefox Version 3.0.9
Mozilla ≫ Firefox Version 3.0.10
Mozilla ≫ Firefox Version 3.0.11
Mozilla ≫ Firefox Version 3.0.12
Mozilla ≫ Firefox Version 3.0.13
Mozilla ≫ Firefox Version 3.0.14
Mozilla ≫ Firefox Version 3.0.15
Mozilla ≫ Firefox Version 3.0.16
Mozilla ≫ Firefox Version 3.0.17
Mozilla ≫ Firefox Version 3.5
Mozilla ≫ Firefox Version 3.5.1
Mozilla ≫ Firefox Version 3.5.2
Mozilla ≫ Firefox Version 3.5.3
Mozilla ≫ Firefox Version 3.5.4
Mozilla ≫ Firefox Version 3.5.5
Mozilla ≫ Firefox Version 3.5.6
Mozilla ≫ Firefox Version 3.5.7
Mozilla ≫ Firefox Version 3.5.8
Mozilla ≫ Firefox Version 3.5.9
Mozilla ≫ Firefox Version 3.5.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.11% 0.974
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00002.html
http://secunia.com/advisories/41095
Vendor Advisory
http://secunia.com/advisories/41168
Vendor Advisory
http://www.exploit-db.com/exploits/14730
Exploit
http://www.exploit-db.com/exploits/14783
Exploit
http://www.mozilla.org/security/announce/2010/mfsa2010-52.html
http://www.securityfocus.com/archive/1/513324/100/0/threaded
http://www.vupen.com/english/advisories/2010/2169
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2201
http://www.vupen.com/english/advisories/2010/2323
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=579593
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12143