CVE-2010-3765
Mozilla Multiple Products Remote Code Execution Vulnerability
Published Oct 27, 2010 · updated Jun 16, 2026 · Mozilla Multiple Products
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
Timeline
Detection, updates, and resolution for this record.
Oct 27, 2010 · Catalog
Detected
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memor
Oct 6, 2025 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Oct 27, 2025 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memor
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Oct 27, 2025
Affected
- cpe mozilla/firefox3.5
- cpe mozilla/firefox3.5.1
- cpe mozilla/firefox3.5.2
- cpe mozilla/firefox3.5.3
- cpe mozilla/firefox3.5.4
- cpe mozilla/firefox3.5.5
- cpe mozilla/firefox3.5.6
- cpe mozilla/firefox3.5.7
- cpe mozilla/firefox3.6
- cpe mozilla/seamonkey2.0
- cpe mozilla/thunderbird3.0.1
- vendor Mozilla Multiple Productsversion unspecified
Sources
- CISA KEVCVE-2010-3765
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.
cisa.gov - CVE.orgCVE-2010-3765
Official CVE identifier
cve.org - FIRST EPSSCVE-2010-3765
30-day exploitation probability 83.2%
first.org - Exploit Database15341
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database15342
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database16509
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/mozilla_interleaved_write
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2010-3765
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::Cont
nvd.nist.gov