CVE-2010-1196

CVE-2010-1196 describes an integer overflow vulnerability in the nsGenericDOMDataNode::SetTextInternal function affecting Mozilla Firefox 3.5.x and 3.6.x, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5. This flaw allows remote attackers to execute arbitrary code through a heap-based buffer overflow triggered by a long text value in a DOM node. With a CVSS score of 9.3, this vulnerability is critical, requiring no authentication and having a medium attack complexity, but potentially leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.