CVE-2010-1028

CVE-2010-1028 describes an integer overflow vulnerability in the WOFF decoder of Mozilla Firefox versions 3.6 prior to 3.6.2 and 3.7 prior to 3.7 alpha 3. This flaw allows remote attackers to execute arbitrary code by crafting a malicious WOFF file that triggers a buffer overflow. With a CVSS score of 9.3, this vulnerability is critical, requiring no authentication and having high impact on confidentiality, integrity, and availability, though it necessitates medium attack complexity. While the FAUCET Risk Score is high at 86/100, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.