← Database

CVE-2010-1198

CRITICAL CVSS: 9.3 Published: 2010-06-24 Modified: 2026-06-16

Description

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.

Affected Platforms

Mozilla FirefoxMozilla Seamonkey

Weakness Type

CWE-399

References