firefox: arbitrary code execution [LWN.net]

Package(s):

firefox

CVE #(s):

CVE-2010-2755

Created:

July 26, 2010

Updated:

August 17, 2010

Description:

From the Red Hat advisory:

An invalid free flaw was found in Firefox's plugin handler. Malicious web content could result in an invalid memory pointer being freed, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running the Firefox application.

Alerts:

CentOS	CESA-2010:0557	2010-08-16
Mandriva	MDVSA-2010:147	2010-08-10
CentOS	CESA-2010:0558	2010-08-06
SUSE	SUSE-SA:2010:032	2010-07-30
openSUSE	openSUSE-SU-2010:0430-3	2010-07-29
CentOS	CESA-2010:0557	2010-07-27
CentOS	CESA-2010:0556	2010-07-27
Fedora	FEDORA-2010-11452	2010-07-27
Fedora	FEDORA-2010-11472	2010-07-27
Ubuntu	USN-930-6	2010-07-26
Ubuntu	USN-957-2	2010-07-26
Slackware	SSA:2010-204-01	2010-07-26
Red Hat	RHSA-2010:0557-01	2010-07-23
Red Hat	RHSA-2010:0558-01	2010-07-23
Red Hat	RHSA-2010:0556-01	2010-07-23
Gentoo	201301-01	2013-01-07

(Log in to post comments)