# CVEs published 2010-12-10 18 CVEs were published on December 10, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-3766](https://cve.now/CVE-2010-3766.md): Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers (no CVSS) - [CVE-2010-3767](https://cve.now/CVE-2010-3767.md): Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows re (no CVSS) - [CVE-2010-3768](https://cve.now/CVE-2010-3768.md): Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not (no CVSS) - [CVE-2010-3769](https://cve.now/CVE-2010-3769.md): The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, (no CVSS) - [CVE-2010-3770](https://cve.now/CVE-2010-3770.md): Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and Se (no CVSS) - [CVE-2010-3771](https://cve.now/CVE-2010-3771.md): Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element (no CVSS) - [CVE-2010-3772](https://cve.now/CVE-2010-3772.md): Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain chi (no CVSS) - [CVE-2010-3773](https://cve.now/CVE-2010-3773.md): Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on (no CVSS) - [CVE-2010-3774](https://cve.now/CVE-2010-3774.md): The NS\_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonk (no CVSS) - [CVE-2010-3775](https://cve.now/CVE-2010-3775.md): Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving (no CVSS) - [CVE-2010-3776](https://cve.now/CVE-2010-3776.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0. (no CVSS) - [CVE-2010-3777](https://cve.now/CVE-2010-3777.md): Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denia (no CVSS) - [CVE-2010-3778](https://cve.now/CVE-2010-3778.md): Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attac (no CVSS) - [CVE-2010-3861](https://cve.now/CVE-2010-3861.md): The ethtool\_get\_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, w (no CVSS) - [CVE-2010-3880](https://cve.now/CVE-2010-3880.md): net/ipv4/inet\_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET\_DIAG bytecode, which allows local users to cause a d (no CVSS) - [CVE-2010-3918](https://cve.now/CVE-2010-3918.md): Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read o (no CVSS) - [CVE-2010-3919](https://cve.now/CVE-2010-3919.md): Fenrir Grani 4.5 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or mod (no CVSS) - [CVE-2010-4157](https://cve.now/CVE-2010-4157.md): Integer overflow in the ioc\_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local use (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-12-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.