{"id":"CVE-2010-3765","url":"https://www.cyber-defence.io/tools/cve/CVE-2010-3765","generatedAt":"2026-10-27T20:51:56.204Z","title":"Mozilla Multiple Products Remote Code Execution Vulnerability","description":"Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.","published":"2010-10-28T00:00:05.000Z","lastModified":"2026-06-16T23:23:29.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["mozilla/firefox","mozilla/thunderbird","mozilla/seamonkey"],"epss":{"score":0.83156,"percentile":0.99673,"date":"2026-10-26","history":[]},"kev":{"listed":true,"dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomwareCampaignUse":"Unknown","notes":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ; https://nvd.nist.gov/vuln/detail/CVE-2010-3765"},"exploits":{"count":4,"verified":true,"firstPublished":"2010-10-28","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":16509,"kind":"exploit","title":"Mozilla Firefox - Interleaving 'document.write' / 'appendChild' (Metasploit)","url":"https://www.exploit-db.com/exploits/16509","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/16509.rb","file":"exploits/windows/remote/16509.rb","published":"2011-02-22","added":"2011-02-22","updated":"2011-03-10","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2010-3765","OSVDB-68905"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":15352,"kind":"exploit","title":"Mozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow","url":"https://www.exploit-db.com/exploits/15352","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/15352.html","file":"exploits/windows/remote/15352.html","published":"2010-10-29","added":"2010-10-29","updated":"2017-11-22","author":"anonymous","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2010-3765","OSVDB-68905"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comFirefoxSetup3.6.11.exe","screenshotUrl":"http://www.exploit-db.com/screenshots/idlt15500/screen-shot-2010-10-29-at-54324-am.png","referenceUrl":null},{"edbId":15342,"kind":"exploit","title":"Mozilla Firefox - Simplified Memory Corruption (PoC)","url":"https://www.exploit-db.com/exploits/15342","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/15342.html","file":"exploits/multiple/dos/15342.html","published":"2010-10-28","added":"2010-10-28","updated":"2010-10-29","author":"extraexploit","type":"dos","platform":"multiple","port":null,"verified":true,"codes":["CVE-2010-3765","OSVDB-68921"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comFirefoxSetup3.6.11.exe","screenshotUrl":null,"referenceUrl":null},{"edbId":15341,"kind":"exploit","title":"Mozilla Firefox - Interleaving 'document.write' / 'appendChild' Denial of Service","url":"https://www.exploit-db.com/exploits/15341","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/15341.html","file":"exploits/multiple/dos/15341.html","published":"2010-10-28","added":"2010-10-28","updated":"2010-10-28","author":"Daniel Veditz","type":"dos","platform":"multiple","port":null,"verified":true,"codes":["CVE-2010-3765","OSVDB-68921","OSVDB-68905"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comFirefoxSetup3.6.11.exe","screenshotUrl":"http://www.exploit-db.com/screenshots/idlt15500/screen-shot-2010-10-27-at-85718-pm.png","referenceUrl":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222"}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 27 October 2025). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://isc.sans.edu/diary.html?storyid=9817","tags":["Press/Media Coverage"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","tags":["Product"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41761","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41965","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41966","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41969","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41975","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42003","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42008","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42043","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42867","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://support.avaya.com/css/P8/documents/100114329","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://support.avaya.com/css/P8/documents/100114335","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-2124","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15341","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15342","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15352","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:213","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:219","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-73.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.norman.com/about_norman/press_center/news_archive/2010/129223/","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.norman.com/security_center/virus_description_archive/129146/","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0808.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0809.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0810.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0861.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0896.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/44425","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1024645","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1024650","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1024651","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1011-2","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1011-3","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-1011-1","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2837","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2857","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2864","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2871","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0061","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222","tags":["Issue Tracking"],"source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53","tags":["Issue Tracking"],"source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646997","tags":["Issue Tracking"],"source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0812.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isc.sans.edu/diary.html?storyid=9817","tags":["Press/Media Coverage"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter","tags":["Product"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41761","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3765","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}