CVE ID:	CVE-2010-3765
Description:	Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
Test IDs:	1.3.6.1.4.1.25623.1.0.68365   1.3.6.1.4.1.25623.1.0.862477   1.3.6.1.4.1.25623.1.0.68312   1.3.6.1.4.1.25623.1.0.68518   1.3.6.1.4.1.25623.1.0.68497   1.3.6.1.4.1.25623.1.0.862492   1.3.6.1.4.1.25623.1.0.68287   1.3.6.1.4.1.25623.1.0.68358   1.3.6.1.4.1.25623.1.0.68359   1.3.6.1.4.1.25623.1.0.68517   1.3.6.1.4.1.25623.1.0.840526   1.3.6.1.4.1.25623.1.0.68311   1.3.6.1.4.1.25623.1.0.68458   1.3.6.1.4.1.25623.1.0.68475   1.3.6.1.4.1.25623.1.0.68520   1.3.6.1.4.1.25623.1.0.68477   1.3.6.1.4.1.25623.1.0.68519   1.3.6.1.4.1.25623.1.0.862491   1.3.6.1.4.1.25623.1.0.862486   1.3.6.1.4.1.25623.1.0.68283   1.3.6.1.4.1.25623.1.0.862484   1.3.6.1.4.1.25623.1.0.862497   1.3.6.1.4.1.25623.1.0.862482   1.3.6.1.4.1.25623.1.0.840529   1.3.6.1.4.1.25623.1.0.801475   1.3.6.1.4.1.25623.1.0.840528   1.3.6.1.4.1.25623.1.0.68476   1.3.6.1.4.1.25623.1.0.68286   1.3.6.1.4.1.25623.1.0.122302   1.3.6.1.4.1.25623.1.0.68284
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3765 BugTraq ID: 44425 http://www.securityfocus.com/bid/44425 Debian Security Information: DSA-2124 (Google Search) http://www.debian.org/security/2010/dsa-2124 http://www.exploit-db.com/exploits/15341 http://www.exploit-db.com/exploits/15342 http://www.exploit-db.com/exploits/15352 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050061.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050233.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:213 http://www.mandriva.com/security/advisories?name=MDVSA-2010:219 http://isc.sans.edu/diary.html?storyid=9817 http://norman.com/about_norman/press_center/news_archive/2010/129223/en?utm_source=twitterfeed&utm_medium=twitter http://www.norman.com/about_norman/press_center/news_archive/2010/129223/ http://www.norman.com/security_center/virus_description_archive/129146/ https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12108 RedHat Security Advisories: RHSA-2010:0808 http://www.redhat.com/support/errata/RHSA-2010-0808.html RedHat Security Advisories: RHSA-2010:0809 http://www.redhat.com/support/errata/RHSA-2010-0809.html RedHat Security Advisories: RHSA-2010:0810 http://www.redhat.com/support/errata/RHSA-2010-0810.html RedHat Security Advisories: RHSA-2010:0812 https://rhn.redhat.com/errata/RHSA-2010-0812.html RedHat Security Advisories: RHSA-2010:0861 http://www.redhat.com/support/errata/RHSA-2010-0861.html RedHat Security Advisories: RHSA-2010:0896 http://www.redhat.com/support/errata/RHSA-2010-0896.html http://www.securitytracker.com/id?1024645 http://www.securitytracker.com/id?1024650 http://www.securitytracker.com/id?1024651 http://secunia.com/advisories/41761 http://secunia.com/advisories/41965 http://secunia.com/advisories/41966 http://secunia.com/advisories/41969 http://secunia.com/advisories/41975 http://secunia.com/advisories/42003 http://secunia.com/advisories/42008 http://secunia.com/advisories/42043 http://secunia.com/advisories/42867 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.556706 http://www.ubuntu.com/usn/usn-1011-1 http://www.ubuntu.com/usn/USN-1011-2 http://www.ubuntu.com/usn/USN-1011-3 http://www.vupen.com/english/advisories/2010/2837 http://www.vupen.com/english/advisories/2010/2857 http://www.vupen.com/english/advisories/2010/2864 http://www.vupen.com/english/advisories/2010/2871 http://www.vupen.com/english/advisories/2011/0061