{"history":[{"alert":0,"cve":"CVE-2010-3765","id":21398,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.83156, \"percentile\": 0.99681}"},{"alert":0,"cve":"CVE-2010-3765","id":19014,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.83156, \"percentile\": 0.99679}"},{"alert":0,"cve":"CVE-2010-3765","id":16980,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.83156, \"percentile\": 0.99679}"},{"alert":0,"cve":"CVE-2010-3765","id":15043,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.83156, \"percentile\": 0.99679}"},{"alert":1,"cve":"CVE-2010-3765","id":14960,"kind":"cna","observed_at":1794090000,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-07T03:18:53.216Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"44425\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/44425\"}, {\"name\": \"RHSA-2010:0812\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"https://rhn.redhat.com/errata/RHSA-2010-0812.html\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53\"}, {\"name\": \"ADV-2010-2837\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2837\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=646997\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://support.avaya.com/css/P8/documents/100114335\"}, {\"name\": \"41965\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/41965\"}, {\"name\": \"41975\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/41975\"}, {\"name\": \"RHSA-2010:0896\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0896.html\"}, {\"name\": \"RHSA-2010:0808\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0808.html\"}, {\"name\": \"15341\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"http://www.exploit-db.com/exploits/15341\"}, {\"name\": \"1024651\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id?1024651\"}, {\"name\": \"41761\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/41761\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222\"}, {\"name\": \"FEDORA-2010-17105\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter\"}, {\"name\": \"41969\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/41969\"}, {\"name\": \"USN-1011-3\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"http://www.ubuntu.com/usn/USN-1011-3\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/\"}, {\"name\": \"USN-1011-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"http://www.ubuntu.com/usn/usn-1011-1\"}, {\"name\": \"1024650\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id?1024650\"}, {\"name\": \"USN-1011-2\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"], \"url\": \"http://www.ubuntu.com/usn/USN-1011-2\"}, {\"name\": \"RHSA-2010:0809\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0809.html\"}, {\"name\": \"MDVSA-2010:219\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\", \"x_transferred\"], \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219\"}, {\"name\": \"42867\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/42867\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/\"}, {\"name\": \"ADV-2010-2857\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2857\"}, {\"name\": \"ADV-2011-0061\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"], \"url\": \"http://www.vupen.com/english/advisories/2011/0061\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://support.avaya.com/css/P8/documents/100114329\"}, {\"name\": \"DSA-2124\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"], \"url\": \"http://www.debian.org/security/2010/dsa-2124\"}, {\"name\": \"1024645\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id?1024645\"}, {\"name\": \"42043\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/42043\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://www.norman.com/security_center/virus_description_archive/129146/\"}, {\"name\": \"41966\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/41966\"}, {\"name\": \"MDVSA-2010:213\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\", \"x_transferred\"], \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213\"}, {\"name\": \"42008\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/42008\"}, {\"name\": \"FEDORA-2010-16883\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html\"}, {\"name\": \"SSA:2010-305-01\", \"tags\": [\"vendor-advisory\", \"x_refsource_SLACKWARE\", \"x_transferred\"], \"url\": \"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706\"}, {\"name\": \"ADV-2010-2871\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2871\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://isc.sans.edu/diary.html?storyid=9817\"}, {\"name\": \"RHSA-2010:0810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0810.html\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html\"}, {\"name\": \"15352\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"http://www.exploit-db.com/exploits/15352\"}, {\"name\": \"oval:org.mitre.oval:def:12108\", \"tags\": [\"vdb-entry\", \"signature\", \"x_refsource_OVAL\", \"x_transferred\"], \"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108\"}, {\"name\": \"42003\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\", \"x_transferred\"], \"url\": \"http://secunia.com/advisories/42003\"}, {\"name\": \"FEDORA-2010-16897\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html\"}, {\"name\": \"RHSA-2010:0861\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0861.html\"}, {\"name\": \"FEDORA-2010-16885\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html\"}, {\"name\": \"15342\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"http://www.exploit-db.com/exploits/15342\"}, {\"name\": \"ADV-2010-2864\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\", \"x_transferred\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2864\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2010-3765\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-10-04T03:55:28.039016Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-10-06\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-119\", \"description\": \"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-22T00:05:51.248Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-10-06T00:00:00.000Z\", \"value\": \"CVE-2010-3765 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"n/a\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2010-10-26T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"n/a\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2017-09-18T12:57:01.000Z\", \"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\"}, \"references\": [{\"name\": \"44425\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/44425\"}, {\"name\": \"RHSA-2010:0812\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"https://rhn.redhat.com/errata/RHSA-2010-0812.html\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53\"}, {\"name\": \"ADV-2010-2837\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2837\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=646997\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://support.avaya.com/css/P8/documents/100114335\"}, {\"name\": \"41965\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/41965\"}, {\"name\": \"41975\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/41975\"}, {\"name\": \"RHSA-2010:0896\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0896.html\"}, {\"name\": \"RHSA-2010:0808\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0808.html\"}, {\"name\": \"15341\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"http://www.exploit-db.com/exploits/15341\"}, {\"name\": \"1024651\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id?1024651\"}, {\"name\": \"41761\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/41761\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222\"}, {\"name\": \"FEDORA-2010-17105\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter\"}, {\"name\": \"41969\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/41969\"}, {\"name\": \"USN-1011-3\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"http://www.ubuntu.com/usn/USN-1011-3\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/\"}, {\"name\": \"USN-1011-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"http://www.ubuntu.com/usn/usn-1011-1\"}, {\"name\": \"1024650\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id?1024650\"}, {\"name\": \"USN-1011-2\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"], \"url\": \"http://www.ubuntu.com/usn/USN-1011-2\"}, {\"name\": \"RHSA-2010:0809\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0809.html\"}, {\"name\": \"MDVSA-2010:219\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\"], \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219\"}, {\"name\": \"42867\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/42867\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/\"}, {\"name\": \"ADV-2010-2857\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2857\"}, {\"name\": \"ADV-2011-0061\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"], \"url\": \"http://www.vupen.com/english/advisories/2011/0061\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://support.avaya.com/css/P8/documents/100114329\"}, {\"name\": \"DSA-2124\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"], \"url\": \"http://www.debian.org/security/2010/dsa-2124\"}, {\"name\": \"1024645\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id?1024645\"}, {\"name\": \"42043\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/42043\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://www.norman.com/security_center/virus_description_archive/129146/\"}, {\"name\": \"41966\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/41966\"}, {\"name\": \"MDVSA-2010:213\", \"tags\": [\"vendor-advisory\", \"x_refsource_MANDRIVA\"], \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213\"}, {\"name\": \"42008\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/42008\"}, {\"name\": \"FEDORA-2010-16883\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html\"}, {\"name\": \"SSA:2010-305-01\", \"tags\": [\"vendor-advisory\", \"x_refsource_SLACKWARE\"], \"url\": \"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706\"}, {\"name\": \"ADV-2010-2871\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2871\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://isc.sans.edu/diary.html?storyid=9817\"}, {\"name\": \"RHSA-2010:0810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0810.html\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html\"}, {\"name\": \"15352\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"http://www.exploit-db.com/exploits/15352\"}, {\"name\": \"oval:org.mitre.oval:def:12108\", \"tags\": [\"vdb-entry\", \"signature\", \"x_refsource_OVAL\"], \"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108\"}, {\"name\": \"42003\", \"tags\": [\"third-party-advisory\", \"x_refsource_SECUNIA\"], \"url\": \"http://secunia.com/advisories/42003\"}, {\"name\": \"FEDORA-2010-16897\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html\"}, {\"name\": \"RHSA-2010:0861\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"], \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0861.html\"}, {\"name\": \"FEDORA-2010-16885\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"], \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html\"}, {\"name\": \"15342\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"http://www.exploit-db.com/exploits/15342\"}, {\"name\": \"ADV-2010-2864\", \"tags\": [\"vdb-entry\", \"x_refsource_VUPEN\"], \"url\": \"http://www.vupen.com/english/advisories/2010/2864\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"cve@mitre.org\", \"ID\": \"CVE-2010-3765\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"n/a\", \"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}}]}, \"vendor_name\": \"n/a\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"44425\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/44425\"}, {\"name\": \"RHSA-2010:0812\", \"refsource\": \"REDHAT\", \"url\": \"https://rhn.redhat.com/errata/RHSA-2010-0812.html\"}, {\"name\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53\", \"refsource\": \"MISC\", \"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53\"}, {\"name\": \"ADV-2010-2837\", \"refsource\": \"VUPEN\", \"url\": \"http://www.vupen.com/english/advisories/2010/2837\"}, {\"name\": \"https://bugzilla.redhat.com/show_bug.cgi?id=646997\", \"refsource\": \"CONFIRM\", \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=646997\"}, {\"name\": \"http://support.avaya.com/css/P8/documents/100114335\", \"refsource\": \"CONFIRM\", \"url\": \"http://support.avaya.com/css/P8/documents/100114335\"}, {\"name\": \"41965\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/41965\"}, {\"name\": \"41975\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/41975\"}, {\"name\": \"RHSA-2010:0896\", \"refsource\": \"REDHAT\", \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0896.html\"}, {\"name\": \"RHSA-2010:0808\", \"refsource\": \"REDHAT\", \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0808.html\"}, {\"name\": \"15341\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"http://www.exploit-db.com/exploits/15341\"}, {\"name\": \"1024651\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id?1024651\"}, {\"name\": \"41761\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/41761\"}, {\"name\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222\", \"refsource\": \"CONFIRM\", \"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=607222\"}, {\"name\": \"FEDORA-2010-17105\", \"refsource\": \"FEDORA\", \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html\"}, {\"name\": \"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter\", \"refsource\": \"MISC\", \"url\": \"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter\"}, {\"name\": \"41969\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/41969\"}, {\"name\": \"USN-1011-3\", \"refsource\": \"UBUNTU\", \"url\": \"http://www.ubuntu.com/usn/USN-1011-3\"}, {\"name\": \"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox\", \"refsource\": \"CONFIRM\", \"url\": \"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox\"}, {\"name\": \"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/\", \"refsource\": \"MISC\", \"url\": \"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/\"}, {\"name\": \"USN-1011-1\", \"refsource\": \"UBUNTU\", \"url\": \"http://www.ubuntu.com/usn/usn-1011-1\"}, {\"name\": \"1024650\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id?1024650\"}, {\"name\": \"USN-1011-2\", \"refsource\": \"UBUNTU\", \"url\": \"http://www.ubuntu.com/usn/USN-1011-2\"}, {\"name\": \"RHSA-2010:0809\", \"refsource\": \"REDHAT\", \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0809.html\"}, {\"name\": \"MDVSA-2010:219\", \"refsource\": \"MANDRIVA\", \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219\"}, {\"name\": \"42867\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/42867\"}, {\"name\": \"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/\", \"refsource\": \"CONFIRM\", \"url\": \"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/\"}, {\"name\": \"ADV-2010-2857\", \"refsource\": \"VUPEN\", \"url\": \"http://www.vupen.com/english/advisories/2010/2857\"}, {\"name\": \"ADV-2011-0061\", \"refsource\": \"VUPEN\", \"url\": \"http://www.vupen.com/english/advisories/2011/0061\"}, {\"name\": \"http://support.avaya.com/css/P8/documents/100114329\", \"refsource\": \"CONFIRM\", \"url\": \"http://support.avaya.com/css/P8/documents/100114329\"}, {\"name\": \"DSA-2124\", \"refsource\": \"DEBIAN\", \"url\": \"http://www.debian.org/security/2010/dsa-2124\"}, {\"name\": \"1024645\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id?1024645\"}, {\"name\": \"42043\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/42043\"}, {\"name\": \"http://www.norman.com/security_center/virus_description_archive/129146/\", \"refsource\": \"MISC\", \"url\": \"http://www.norman.com/security_center/virus_description_archive/129146/\"}, {\"name\": \"41966\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/41966\"}, {\"name\": \"MDVSA-2010:213\", \"refsource\": \"MANDRIVA\", \"url\": \"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213\"}, {\"name\": \"42008\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/42008\"}, {\"name\": \"FEDORA-2010-16883\", \"refsource\": \"FEDORA\", \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html\"}, {\"name\": \"SSA:2010-305-01\", \"refsource\": \"SLACKWARE\", \"url\": \"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706\"}, {\"name\": \"ADV-2010-2871\", \"refsource\": \"VUPEN\", \"url\": \"http://www.vupen.com/english/advisories/2010/2871\"}, {\"name\": \"http://isc.sans.edu/diary.html?storyid=9817\", \"refsource\": \"MISC\", \"url\": \"http://isc.sans.edu/diary.html?storyid=9817\"}, {\"name\": \"RHSA-2010:0810\", \"refsource\": \"REDHAT\", \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0810.html\"}, {\"name\": \"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html\", \"refsource\": \"CONFIRM\", \"url\": \"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html\"}, {\"name\": \"15352\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"http://www.exploit-db.com/exploits/15352\"}, {\"name\": \"oval:org.mitre.oval:def:12108\", \"refsource\": \"OVAL\", \"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108\"}, {\"name\": \"42003\", \"refsource\": \"SECUNIA\", \"url\": \"http://secunia.com/advisories/42003\"}, {\"name\": \"FEDORA-2010-16897\", \"refsource\": \"FEDORA\", \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html\"}, {\"name\": \"RHSA-2010:0861\", \"refsource\": \"REDHAT\", \"url\": \"http://www.redhat.com/support/errata/RHSA-2010-0861.html\"}, {\"name\": \"FEDORA-2010-16885\", \"refsource\": \"FEDORA\", \"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html\"}, {\"name\": \"15342\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"http://www.exploit-db.com/exploits/15342\"}, {\"name\": \"ADV-2010-2864\", \"refsource\": \"VUPEN\", \"url\": \"http://www.vupen.com/english/advisories/2010/2864\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"assignerShortName\": \"mitre\", \"cveId\": \"CVE-2010-3765\", \"datePublished\": \"2010-10-27T22:00:00.000Z\", \"dateReserved\": \"2010-10-05T00:00:00.000Z\", \"dateUpdated\": \"2025-10-22T00:05:51.248Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2010-3765","id":13021,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.83156, \"percentile\": 0.99679}"},{"alert":0,"cve":"CVE-2010-3765","id":10803,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.83156, \"percentile\": 0.99679}"},{"alert":0,"cve":"CVE-2010-3765","id":8549,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.83156, \"percentile\": 0.99678}"},{"alert":0,"cve":"CVE-2010-3765","id":6337,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.83156, \"percentile\": 0.99678}"},{"alert":0,"cve":"CVE-2010-3765","id":4114,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.83156, \"percentile\": 0.99677}"},{"alert":0,"cve":"CVE-2010-3765","id":1896,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.83156, \"percentile\": 0.99676}"},{"alert":1,"cve":"CVE-2010-3765","id":338,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2010-3765\", \"cwes\": [], \"dateAdded\": \"2025-10-06\", \"dueDate\": \"2025-10-27\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ; https://nvd.nist.gov/vuln/detail/CVE-2010-3765\", \"product\": \"Multiple Products\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.\", \"vendorProject\": \"Mozilla\", \"vulnerabilityName\": \"Mozilla Multiple Products Remote Code Execution Vulnerability\"}"}],"record":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:18:53.216Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"44425","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/44425"},{"name":"RHSA-2010:0812","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53"},{"name":"ADV-2010-2837","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2837"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/css/P8/documents/100114335"},{"name":"41965","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41965"},{"name":"41975","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41975"},{"name":"RHSA-2010:0896","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html"},{"name":"RHSA-2010:0808","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html"},{"name":"15341","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15341"},{"name":"1024651","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024651"},{"name":"41761","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41761"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"},{"name":"FEDORA-2010-17105","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter"},{"name":"41969","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41969"},{"name":"USN-1011-3","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1011-3"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/"},{"name":"USN-1011-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-1011-1"},{"name":"1024650","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024650"},{"name":"USN-1011-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1011-2"},{"name":"RHSA-2010:0809","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html"},{"name":"MDVSA-2010:219","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219"},{"name":"42867","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42867"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/"},{"name":"ADV-2010-2857","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2857"},{"name":"ADV-2011-0061","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0061"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/css/P8/documents/100114329"},{"name":"DSA-2124","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2010/dsa-2124"},{"name":"1024645","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024645"},{"name":"42043","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42043"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.norman.com/security_center/virus_description_archive/129146/"},{"name":"41966","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/41966"},{"name":"MDVSA-2010:213","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213"},{"name":"42008","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42008"},{"name":"FEDORA-2010-16883","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html"},{"name":"SSA:2010-305-01","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"],"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706"},{"name":"ADV-2010-2871","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2871"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://isc.sans.edu/diary.html?storyid=9817"},{"name":"RHSA-2010:0810","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html"},{"name":"15352","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15352"},{"name":"oval:org.mitre.oval:def:12108","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108"},{"name":"42003","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42003"},{"name":"FEDORA-2010-16897","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html"},{"name":"RHSA-2010:0861","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html"},{"name":"FEDORA-2010-16885","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html"},{"name":"15342","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15342"},{"name":"ADV-2010-2864","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/2864"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2010-3765","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-10-04T03:55:28.039016Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-10-06","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-22T00:05:51.248Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765"}],"timeline":[{"lang":"en","time":"2025-10-06T00:00:00.000Z","value":"CVE-2010-3765 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-10-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"44425","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/44425"},{"name":"RHSA-2010:0812","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html"},{"tags":["x_refsource_MISC"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53"},{"name":"ADV-2010-2837","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2837"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/css/P8/documents/100114335"},{"name":"41965","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41965"},{"name":"41975","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41975"},{"name":"RHSA-2010:0896","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html"},{"name":"RHSA-2010:0808","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html"},{"name":"15341","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15341"},{"name":"1024651","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024651"},{"name":"41761","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41761"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"},{"name":"FEDORA-2010-17105","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html"},{"tags":["x_refsource_MISC"],"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter"},{"name":"41969","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41969"},{"name":"USN-1011-3","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1011-3"},{"tags":["x_refsource_CONFIRM"],"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox"},{"tags":["x_refsource_MISC"],"url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/"},{"name":"USN-1011-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-1011-1"},{"name":"1024650","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024650"},{"name":"USN-1011-2","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1011-2"},{"name":"RHSA-2010:0809","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html"},{"name":"MDVSA-2010:219","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219"},{"name":"42867","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42867"},{"tags":["x_refsource_CONFIRM"],"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/"},{"name":"ADV-2010-2857","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2857"},{"name":"ADV-2011-0061","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0061"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/css/P8/documents/100114329"},{"name":"DSA-2124","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2010/dsa-2124"},{"name":"1024645","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024645"},{"name":"42043","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42043"},{"tags":["x_refsource_MISC"],"url":"http://www.norman.com/security_center/virus_description_archive/129146/"},{"name":"41966","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/41966"},{"name":"MDVSA-2010:213","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213"},{"name":"42008","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42008"},{"name":"FEDORA-2010-16883","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html"},{"name":"SSA:2010-305-01","tags":["vendor-advisory","x_refsource_SLACKWARE"],"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706"},{"name":"ADV-2010-2871","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2871"},{"tags":["x_refsource_MISC"],"url":"http://isc.sans.edu/diary.html?storyid=9817"},{"name":"RHSA-2010:0810","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html"},{"name":"15352","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15352"},{"name":"oval:org.mitre.oval:def:12108","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108"},{"name":"42003","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42003"},{"name":"FEDORA-2010-16897","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html"},{"name":"RHSA-2010:0861","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html"},{"name":"FEDORA-2010-16885","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html"},{"name":"15342","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15342"},{"name":"ADV-2010-2864","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/2864"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-3765","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"44425","refsource":"BID","url":"http://www.securityfocus.com/bid/44425"},{"name":"RHSA-2010:0812","refsource":"REDHAT","url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53","refsource":"MISC","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53"},{"name":"ADV-2010-2837","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2837"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=646997","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997"},{"name":"http://support.avaya.com/css/P8/documents/100114335","refsource":"CONFIRM","url":"http://support.avaya.com/css/P8/documents/100114335"},{"name":"41965","refsource":"SECUNIA","url":"http://secunia.com/advisories/41965"},{"name":"41975","refsource":"SECUNIA","url":"http://secunia.com/advisories/41975"},{"name":"RHSA-2010:0896","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html"},{"name":"RHSA-2010:0808","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html"},{"name":"15341","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15341"},{"name":"1024651","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024651"},{"name":"41761","refsource":"SECUNIA","url":"http://secunia.com/advisories/41761"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222","refsource":"CONFIRM","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"},{"name":"FEDORA-2010-17105","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html"},{"name":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","refsource":"MISC","url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter"},{"name":"41969","refsource":"SECUNIA","url":"http://secunia.com/advisories/41969"},{"name":"USN-1011-3","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1011-3"},{"name":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","refsource":"CONFIRM","url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox"},{"name":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/","refsource":"MISC","url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/"},{"name":"USN-1011-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-1011-1"},{"name":"1024650","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024650"},{"name":"USN-1011-2","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-1011-2"},{"name":"RHSA-2010:0809","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html"},{"name":"MDVSA-2010:219","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219"},{"name":"42867","refsource":"SECUNIA","url":"http://secunia.com/advisories/42867"},{"name":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","refsource":"CONFIRM","url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/"},{"name":"ADV-2010-2857","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2857"},{"name":"ADV-2011-0061","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0061"},{"name":"http://support.avaya.com/css/P8/documents/100114329","refsource":"CONFIRM","url":"http://support.avaya.com/css/P8/documents/100114329"},{"name":"DSA-2124","refsource":"DEBIAN","url":"http://www.debian.org/security/2010/dsa-2124"},{"name":"1024645","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024645"},{"name":"42043","refsource":"SECUNIA","url":"http://secunia.com/advisories/42043"},{"name":"http://www.norman.com/security_center/virus_description_archive/129146/","refsource":"MISC","url":"http://www.norman.com/security_center/virus_description_archive/129146/"},{"name":"41966","refsource":"SECUNIA","url":"http://secunia.com/advisories/41966"},{"name":"MDVSA-2010:213","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213"},{"name":"42008","refsource":"SECUNIA","url":"http://secunia.com/advisories/42008"},{"name":"FEDORA-2010-16883","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html"},{"name":"SSA:2010-305-01","refsource":"SLACKWARE","url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706"},{"name":"ADV-2010-2871","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2871"},{"name":"http://isc.sans.edu/diary.html?storyid=9817","refsource":"MISC","url":"http://isc.sans.edu/diary.html?storyid=9817"},{"name":"RHSA-2010:0810","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html"},{"name":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html","refsource":"CONFIRM","url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html"},{"name":"15352","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15352"},{"name":"oval:org.mitre.oval:def:12108","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108"},{"name":"42003","refsource":"SECUNIA","url":"http://secunia.com/advisories/42003"},{"name":"FEDORA-2010-16897","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html"},{"name":"RHSA-2010:0861","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html"},{"name":"FEDORA-2010-16885","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html"},{"name":"15342","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15342"},{"name":"ADV-2010-2864","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/2864"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-3765","datePublished":"2010-10-27T22:00:00.000Z","dateReserved":"2010-10-05T00:00:00.000Z","dateUpdated":"2025-10-22T00:05:51.248Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794090000,"cve":"CVE-2010-3765","description":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.","epss":{"date":"2026-11-12","epss":0.83156,"percentile":0.99681},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2010-3765","cwes":[],"dateAdded":"2025-10-06","dueDate":"2025-10-27","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ; https://nvd.nist.gov/vuln/detail/CVE-2010-3765","product":"Multiple Products","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.","vendorProject":"Mozilla","vulnerabilityName":"Mozilla Multiple Products Remote Code Execution Vulnerability"},"kev_checked":1794522003,"products":"n/a n/a","references":["http://www.securityfocus.com/bid/44425","https://rhn.redhat.com/errata/RHSA-2010-0812.html","https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53","http://www.vupen.com/english/advisories/2010/2837","https://bugzilla.redhat.com/show_bug.cgi?id=646997","http://support.avaya.com/css/P8/documents/100114335","http://secunia.com/advisories/41965","http://secunia.com/advisories/41975","http://www.redhat.com/support/errata/RHSA-2010-0896.html","http://www.redhat.com/support/errata/RHSA-2010-0808.html","http://www.exploit-db.com/exploits/15341","http://www.securitytracker.com/id?1024651","http://secunia.com/advisories/41761","https://bugzilla.mozilla.org/show_bug.cgi?id=607222","http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html","http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","http://secunia.com/advisories/41969","http://www.ubuntu.com/usn/USN-1011-3","http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","http://www.norman.com/about_norman/press_center/news_archive/2010/129223/","http://www.ubuntu.com/usn/usn-1011-1","http://www.securitytracker.com/id?1024650","http://www.ubuntu.com/usn/USN-1011-2","http://www.redhat.com/support/errata/RHSA-2010-0809.html","http://www.mandriva.com/security/advisories?name=MDVSA-2010:219","http://secunia.com/advisories/42867","http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","http://www.vupen.com/english/advisories/2010/2857","http://www.vupen.com/english/advisories/2011/0061","http://support.avaya.com/css/P8/documents/100114329","http://www.debian.org/security/2010/dsa-2124","http://www.securitytracker.com/id?1024645","http://secunia.com/advisories/42043","http://www.norman.com/security_center/virus_description_archive/129146/","http://secunia.com/advisories/41966","http://www.mandriva.com/security/advisories?name=MDVSA-2010:213","http://secunia.com/advisories/42008","http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html","http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706","http://www.vupen.com/english/advisories/2010/2871","http://isc.sans.edu/diary.html?storyid=9817","http://www.redhat.com/support/errata/RHSA-2010-0810.html","http://www.mozilla.org/security/announce/2010/mfsa2010-73.html","http://www.exploit-db.com/exploits/15352","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108","http://secunia.com/advisories/42003","http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html","http://www.redhat.com/support/errata/RHSA-2010-0861.html","http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html","http://www.exploit-db.com/exploits/15342","http://www.vupen.com/english/advisories/2010/2864","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3765"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Mozilla Multiple Products Remote Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}