{
    "id": "CVE-2010-1214",
    "published": "2010-07-30 20:30:01",
    "last_modified": "2026-06-16 23:17:52",
    "cvss_score": "9.3",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "cwe": "CWE-189",
    "description": "Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.",
    "epss_score": "0.07585",
    "epss_percentile": "0.94366",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-05 18:17:08",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "mozilla",
            "product": "firefox"
        },
        {
            "vendor": "mozilla",
            "product": "seamonkey"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "15027",
            "title": "Mozilla Firefox 3.6.4 - 'Plugin' EnsureCachedAttrParamArrays Remote Code Execution",
            "date": "2010-09-17",
            "url": "https://www.exploit-db.com/exploits/15027"
        },
        {
            "source": "exploit-db",
            "ref_id": "34358",
            "title": "Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow",
            "date": "2010-07-20",
            "url": "https://www.exploit-db.com/exploits/34358"
        }
    ],
    "refs_list": [
        "http://www.mozilla.org/security/announce/2010/mfsa2010-37.html",
        "https://bugzilla.mozilla.org/show_bug.cgi?id=572985",
        "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685",
        "http://www.mozilla.org/security/announce/2010/mfsa2010-37.html",
        "https://bugzilla.mozilla.org/show_bug.cgi?id=572985",
        "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685"
    ]
}