CVE-2010-3769 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-3769 Interim 1 18 2023-12-09T01:54:36Z current 2021-05-30T12:54:05Z 2023-12-09T01:54:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-3769 The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/APY3FMB7NPSOPY6CSSLMQ7MWZQ6NCPPW/#APY3FMB7NPSOPY6CSSLMQ7MWZQ6NCPPW E-Mail link for SUSE-SA:2011:003 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LZWA5IC5L2QN74MAY2LDOH57OMCZY4GE/#LZWA5IC5L2QN74MAY2LDOH57OMCZY4GE E-Mail link for openSUSE-SU-2014:1100-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 openSUSE Leap 15.0 openSUSE Tumbleweed MozillaFirefox-10.0-0.3.2 MozillaFirefox-17.0.4esr-0.10.42 MozillaFirefox-3.6.13-0.7.1 MozillaFirefox-31.7.0esr-0.8.1 MozillaFirefox-devel-31.7.0esr-0.8.1 MozillaFirefox-translations-10.0-0.3.2 MozillaFirefox-translations-17.0.4esr-0.10.42 MozillaFirefox-translations-3.6.13-0.7.1 MozillaFirefox-translations-31.7.0esr-0.8.1 MozillaThunderbird-45.5.1-1.1 MozillaThunderbird-52.7-lp150.2.16 MozillaThunderbird-52.8-1.2 MozillaThunderbird-60.6.1-3.28.1 MozillaThunderbird-buildsymbols-45.5.1-1.1 MozillaThunderbird-devel-45.5.1-1.1 MozillaThunderbird-devel-52.8-1.2 MozillaThunderbird-translations-common-45.5.1-1.1 MozillaThunderbird-translations-common-52.7-lp150.2.16 MozillaThunderbird-translations-common-52.8-1.2 MozillaThunderbird-translations-common-60.6.1-3.28.1 MozillaThunderbird-translations-other-45.5.1-1.1 MozillaThunderbird-translations-other-52.7-lp150.2.16 MozillaThunderbird-translations-other-52.8-1.2 MozillaThunderbird-translations-other-60.6.1-3.28.1 mozilla-xulrunner191-1.9.1.16-0.1.1 mozilla-xulrunner191-32bit-1.9.1.16-0.1.1 mozilla-xulrunner191-gnomevfs-1.9.1.16-0.1.1 mozilla-xulrunner191-translations-1.9.1.16-0.1.1 mozilla-xulrunner192-1.9.2.13-1.7.1 mozilla-xulrunner192-1.9.2.24-0.3.1 mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-32bit-1.9.2.13-1.7.1 mozilla-xulrunner192-32bit-1.9.2.24-0.3.2 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-devel-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.13-1.7.1 mozilla-xulrunner192-gnome-1.9.2.24-0.3.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.13-1.7.1 mozilla-xulrunner192-translations-1.9.2.24-0.3.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-x86-1.9.2.24-0.3.1 mozilla-xulrunner192-x86-1.9.2.27-0.2.1 seamonkey-2.40-6.1 seamonkey-dom-inspector-2.40-6.1 seamonkey-irc-2.40-6.1 seamonkey-translations-common-2.40-6.1 seamonkey-translations-other-2.40-6.1 MozillaFirefox-3.6.13-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-translations-3.6.13-0.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-32bit-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-gnomevfs-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner191-translations-1.9.1.16-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-32bit-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-gnome-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mozilla-xulrunner192-translations-1.9.2.13-1.7.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA MozillaFirefox-10.0-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 MozillaFirefox-translations-10.0-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-32bit-1.9.2.24-0.3.2 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-gnome-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-translations-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 mozilla-xulrunner192-x86-1.9.2.24-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP2 MozillaFirefox-17.0.4esr-0.10.42 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-translations-17.0.4esr-0.10.42 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 mozilla-xulrunner192-x86-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP3 MozillaFirefox-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-translations-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 mozilla-xulrunner192-x86-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Server 11 SP4 MozillaFirefox-devel-31.7.0esr-0.8.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mozilla-xulrunner192-devel-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 MozillaThunderbird-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-devel-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-translations-common-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-translations-other-52.8-1.2 as a component of SUSE Linux Enterprise Workstation Extension 15 MozillaThunderbird-60.6.1-3.28.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 MozillaThunderbird-translations-common-60.6.1-3.28.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 MozillaThunderbird-translations-other-60.6.1-3.28.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 MozillaThunderbird-52.7-lp150.2.16 as a component of openSUSE Leap 15.0 MozillaThunderbird-translations-common-52.7-lp150.2.16 as a component of openSUSE Leap 15.0 MozillaThunderbird-translations-other-52.7-lp150.2.16 as a component of openSUSE Leap 15.0 MozillaThunderbird-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-buildsymbols-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-devel-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-translations-common-45.5.1-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-translations-other-45.5.1-1.1 as a component of openSUSE Tumbleweed seamonkey-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-dom-inspector-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-irc-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-translations-common-2.40-6.1 as a component of openSUSE Tumbleweed seamonkey-translations-other-2.40-6.1 as a component of openSUSE Tumbleweed The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read. CVE-2010-3769 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-3.6.13-0.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:MozillaFirefox-translations-3.6.13-0.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-32bit-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-gnomevfs-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner191-translations-1.9.1.16-0.1.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-32bit-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-gnome-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mozilla-xulrunner192-translations-1.9.2.13-1.7.1 SUSE Linux Enterprise Server 11 SP2:MozillaFirefox-10.0-0.3.2 SUSE Linux Enterprise Server 11 SP2:MozillaFirefox-translations-10.0-0.3.2 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-32bit-1.9.2.24-0.3.2 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-gnome-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-translations-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP2:mozilla-xulrunner192-x86-1.9.2.24-0.3.1 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-17.0.4esr-0.10.42 SUSE Linux Enterprise Server 11 SP3:MozillaFirefox-translations-17.0.4esr-0.10.42 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-translations-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP3:mozilla-xulrunner192-x86-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP4:MozillaFirefox-translations-31.7.0esr-0.8.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-translations-1.9.2.27-0.2.1 SUSE Linux Enterprise Server 11 SP4:mozilla-xulrunner192-x86-1.9.2.27-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP4:MozillaFirefox-devel-31.7.0esr-0.8.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mozilla-xulrunner192-devel-1.9.2.27-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-devel-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-common-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15:MozillaThunderbird-translations-other-52.8-1.2 SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-60.6.1-3.28.1 SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-common-60.6.1-3.28.1 SUSE Linux Enterprise Workstation Extension 15 SP1:MozillaThunderbird-translations-other-60.6.1-3.28.1 openSUSE Leap 15.0:MozillaThunderbird-52.7-lp150.2.16 openSUSE Leap 15.0:MozillaThunderbird-translations-common-52.7-lp150.2.16 openSUSE Leap 15.0:MozillaThunderbird-translations-other-52.7-lp150.2.16 openSUSE Tumbleweed:MozillaThunderbird-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-buildsymbols-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-devel-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-translations-common-45.5.1-1.1 openSUSE Tumbleweed:MozillaThunderbird-translations-other-45.5.1-1.1 openSUSE Tumbleweed:seamonkey-2.40-6.1 openSUSE Tumbleweed:seamonkey-dom-inspector-2.40-6.1 openSUSE Tumbleweed:seamonkey-irc-2.40-6.1 openSUSE Tumbleweed:seamonkey-translations-common-2.40-6.1 openSUSE Tumbleweed:seamonkey-translations-other-2.40-6.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C