CVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerability

KEV

Analyzed

AliasesRHSA-2010:0808RHSA-2010:0809RHSA-2010:0810+1 more

Published 27-10-2010Last modified 22-10-2025

Vulnerability summary

CVE-2010-3765 is a critical (CVSS 9.8) vulnerability in Mozilla Multiple Products. It is known to be exploited: CISA lists it, first on 06-10-2025. EPSS estimates a 83.16% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 5 public exploits are recorded.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (06-10-2025)

Source freshness unavailable

How is this decided?

CVSS score

9.8/10

010

Critical · v3.1 (CVE.org)

EPSS score

83.16%

0%100%

Critical · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits5exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 6 · Related 3

DSA-2124-1 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1 OPENSUSE-SU-2024:14572-1 RHSA-2010:0861 RHSA-2010:0896

Timeline

27-10-2010
PublishedVulnerability first disclosed.
06-10-2025
Added to CISA KEVExploitedMozilla Multiple Products Remote Code Execution Vulnerability
22-10-2025
Last modifiedVulnerability information updated.
27-10-2025
CISA remediation dueDeadline passedApply mitigations per vendor instructions.

Description

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.19.8v2.09.3

EPSS trend

Probability

83.16%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 83.16% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 06-10-2025
Federal due date: 27-10-2025

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. www.mozilla.org/en-US/security/advisories/mfsa2010-73 nvd.nist.gov/vuln/detail/CVE-2010-3765

Public exploits

5 found

exploit-databasedosmultipleVerified
Mozilla Firefox - Interleaving 'document.write' / 'appendChild' Denial of Service
Maturity: poc
exploit-databasedosmultipleVerified
Mozilla Firefox - Simplified Memory Corruption (PoC)
Maturity: poc
exploit-databaseremotewindowsVerified
Mozilla Firefox - Interleaving 'document.write' / 'appendChild' (Metasploit)
Maturity: weaponized

Show all 5 exploits

exploit-databaseremotewindowsVerified
Mozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow
Maturity: weaponized
MetasploitremoteUnverified
Mozilla Firefox Interleaved document.write/appendChild Memory Corruption
exploit/windows/browser/mozilla_interleaved_write
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat18 products

firefox< 0:3.6.11-4.el4_8
firefox-debuginfo< 0:3.6.11-4.el4_8
seamonkey< 0:1.0.9-0.62.el3 | < 0:1.0.9-65.el4_8
seamonkey-chat< 0:1.0.9-0.62.el3 | < 0:1.0.9-65.el4_8
seamonkey-debuginfo< 0:1.0.9-0.62.el3 | < 0:1.0.9-65.el4_8

Show all 18

Mozilla3 products

firefox3.5 | 3.5.1 | 3.5.2 | 3.5.3 | 3.5.4 | 3.5.5 | 3.5.6 | 3.5.7 | 3.5.8 | 3.5.9 | 3.5.10 | 3.5.11 | 3.5.12 | 3.5.13 | 3.5.14 | 3.6 | 3.6.2 | 3.6.3 | 3.6.4 | 3.6.6 | 3.6.7 | 3.6.8 | 3.6.9 | 3.6.10 | 3.6.11
seamonkey2.0 | 2.0:alpha_1 | 2.0:alpha_2 | 2.0:alpha_3 | 2.0:beta_1 | 2.0:beta_2 | 2.0:rc1 | 2.0:rc2 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9
thunderbird3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.1.1 | 31.2 | 31.3 | 3.1.4 | 3.1.5

2 vendors · 21 products

References

67 links

www.securityfocus.com/bid/44425VDB EntryX Refsource BIDBroken Link
rhn.redhat.com/errata/RHSA-2010-0812.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=607222X Refsource MISCIssue Tracking
www.vupen.com/english/advisories/2010/2837VDB EntryX Refsource VUPENVendor Advisory
bugzilla.redhat.com/show_bug.cgi?id=646997X Refsource CONFIRMIssue TrackingREPORT
support.avaya.com/css/P8/documents/100114335X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/41965Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/41975Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2010-0896.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0808.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 67 references

www.exploit-db.com/exploits/15341ExploitX Refsource EXPLOIT DB
www.securitytracker.com/id?1024651VDB EntryX Refsource SECTRACKBroken Link
secunia.com/advisories/41761Third Party AdvisoryX Refsource SECUNIAVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=607222X Refsource CONFIRMIssue Tracking
lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
norman.com/about_norman/…X Refsource MISCProduct
secunia.com/advisories/41969Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/USN-1011-3Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefoxX Refsource CONFIRMBroken Link
www.norman.com/about_norman/press_center/news_archive/2010/129223/X Refsource MISCBroken Link
www.ubuntu.com/usn/usn-1011-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securitytracker.com/id?1024650VDB EntryX Refsource SECTRACKBroken Link
www.ubuntu.com/usn/USN-1011-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0809.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2010:219Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/42867Third Party AdvisoryX Refsource SECUNIAVendor Advisory
blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/X Refsource CONFIRMVendor Advisory
www.vupen.com/english/advisories/2010/2857VDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2011/0061VDB EntryX Refsource VUPENVendor Advisory
support.avaya.com/css/P8/documents/100114329X Refsource CONFIRMThird Party Advisory
www.debian.org/security/2010/dsa-2124Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securitytracker.com/id?1024645VDB EntryX Refsource SECTRACKBroken Link
secunia.com/advisories/42043Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.norman.com/security_center/virus_description_archive/129146/X Refsource MISCBroken Link
secunia.com/advisories/41966Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2010:213Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/42008Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
www.vupen.com/english/advisories/2010/2871VDB EntryX Refsource VUPENVendor Advisory
isc.sans.edu/diary.html?storyid=9817X Refsource MISCPress/Media Coverage
www.redhat.com/support/errata/RHSA-2010-0810.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mozilla.org/security/announce/2010/mfsa2010-73.htmlX Refsource CONFIRMThird Party Advisory
www.exploit-db.com/exploits/15352ExploitX Refsource EXPLOIT DB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/42003Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0861.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.exploit-db.com/exploits/15342ExploitX Refsource EXPLOIT DB
www.vupen.com/english/advisories/2010/2864VDB EntryX Refsource VUPENVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765Government ResourceUS Government Resource
access.redhat.com/errata/RHSA-2010:0808Advisory
access.redhat.com/security/updates/classification/ARTICLE
www.mozilla.org/security/known-vulnerabilities/firefox36.htmlARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0808.jsonAdvisory
access.redhat.com/security/cve/CVE-2010-3765REPORT
www.cve.org/CVERecord?id=CVE-2010-3765Advisory
nvd.nist.gov/vuln/detail/CVE-2010-3765Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLE
access.redhat.com/errata/RHSA-2010:0809Advisory
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0809.jsonAdvisory
access.redhat.com/errata/RHSA-2010:0810Advisory
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0810.jsonAdvisory
access.redhat.com/errata/RHSA-2010:0812Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0812.jsonAdvisory