CVE-2010-0175

Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.

• CWE-399

• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://secunia.com/advisories/38566Vendor Advisory
• http://secunia.com/advisories/39117Vendor Advisory
• http://secunia.com/advisories/39136Vendor Advisory
• http://secunia.com/advisories/39204Vendor Advisory
• http://secunia.com/advisories/39240Vendor Advisory
• http://secunia.com/advisories/39242Vendor Advisory
• http://secunia.com/advisories/39243Vendor Advisory
• http://secunia.com/advisories/39308
• http://secunia.com/advisories/39397
• http://securitytracker.com/id?1023780
• http://securitytracker.com/id?1023782
• http://ubuntu.com/usn/usn-921-1
• http://www.debian.org/security/2010/dsa-2027
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:070
• http://www.mozilla.org/security/announce/2010/mfsa2010-17.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0332.html
• http://www.redhat.com/support/errata/RHSA-2010-0333.html
• http://www.securityfocus.com/archive/1/510542/100/0/threaded
• http://www.vupen.com/english/advisories/2010/0748Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0764Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0765Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0781
• http://www.vupen.com/english/advisories/2010/0790
• http://www.vupen.com/english/advisories/2010/0849
• http://www.zerodayinitiative.com/advisories/ZDI-10-050
• https://bugzilla.mozilla.org/show_bug.cgi?id=375928
• https://bugzilla.mozilla.org/show_bug.cgi?id=540100
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57390
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://secunia.com/advisories/38566Vendor Advisory
• http://secunia.com/advisories/39117Vendor Advisory
• http://secunia.com/advisories/39136Vendor Advisory
• http://secunia.com/advisories/39204Vendor Advisory
• http://secunia.com/advisories/39240Vendor Advisory
• http://secunia.com/advisories/39242Vendor Advisory
• http://secunia.com/advisories/39243Vendor Advisory
• http://secunia.com/advisories/39308
• http://secunia.com/advisories/39397
• http://securitytracker.com/id?1023780
• http://securitytracker.com/id?1023782
• http://ubuntu.com/usn/usn-921-1
• http://www.debian.org/security/2010/dsa-2027
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:070
• http://www.mozilla.org/security/announce/2010/mfsa2010-17.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0332.html
• http://www.redhat.com/support/errata/RHSA-2010-0333.html
• http://www.securityfocus.com/archive/1/510542/100/0/threaded
• http://www.vupen.com/english/advisories/2010/0748Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0764Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0765Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0781
• http://www.vupen.com/english/advisories/2010/0790
• http://www.vupen.com/english/advisories/2010/0849
• http://www.zerodayinitiative.com/advisories/ZDI-10-050
• https://bugzilla.mozilla.org/show_bug.cgi?id=375928
• https://bugzilla.mozilla.org/show_bug.cgi?id=540100
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57390
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834

Published

Apr 5, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0169The CSSLoaderImpl::DoSheetComplete function in layout/style/…
• CVE-2010-0170Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the …
• CVE-2010-0171Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and…
• CVE-2010-0172toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js…
• CVE-2010-0173Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2010-0174Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2010-0176Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x…
• CVE-2010-0177Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x…
• CVE-2010-0178Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x…
• CVE-2010-0179Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and Se…
• CVE-2010-0180Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7,…
• CVE-2010-0181Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and Sea…