CVE:CVE-2010-1199
CNNVD:CNNVD-201006-377
Firefox是非常流行的开源WEB浏览器。
Mozilla Firefox 3.5.10 之前的3.5.x版本和3.6.4之前的3.6.x版本的浏览器存在整数溢出漏洞。远程攻击者可以借助节点的超大text值执行任意代码，SeaMonkey 2.0.5 之前的版本的浏览器也存在此漏洞。
solution:Upgrade mozilla firefox to a higher version than 3.5,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.5.6,3.5.7,3.5.9,3.6,3.6.2,3.6.3,and avoid the version 3.5,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.5.6,3.5.7,3.5.9,3.6,3.6.2,3.6.3; Upgrade mozilla seamonkey to a higher version than 2.0.4,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3,and avoid the version (,2.0.4],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,2.0,2.0:alpha_1,2.0:alpha_2,2.0:alpha_3,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,2.0.2,2.0.3; Upgrade mozilla thunderbird to a higher version than 3.0.4,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,1.0,1.0.2,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5.0.2,1.5.0.4,1.5.0.5,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.12,1.5.0.13,1.5.0.14,2.0.0.0,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.9,2.0.0.12,2.0.0.14,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,3.0,3.0.1,3.0.2,3.0.3,and avoid the version (,3.0.4],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,1.0,1.0.2,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5.0.2,1.5.0.4,1.5.0.5,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.12,1.5.0.13,1.5.0.14,2.0.0.0,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.9,2.0.0.12,2.0.0.14,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,3.0,3.0.1,3.0.2,3.0.3