CVE-2010-1208

8.8 highEPSS 5.2%

High (8.8) in mozilla. EPSS 5.2% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2010-07-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
mozilla:seamonkey

References

http://www.mozilla.org/security/announce/2010/mfsa2010-35.html
http://www.securityfocus.com/archive/1/512515
http://www.securityfocus.com/bid/41849
http://www.zerodayinitiative.com/advisories/ZDI-10-134/
https://bugzilla.mozilla.org/show_bug.cgi?id=572986

Check your stack JSON