CVE-2010-0159

Mozilla crashes with evidence of memory corruption (MFSA 2010-01)

Published Feb 21, 2010 CVSS 2.0 · 10.0 Critical EPSS 4.7% KEV · Not listed
Description
The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1999-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0190 The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
Ubuntu USN Ubuntu USN USN-895-1 Firefox 3.0 and Xulrunner 1.9 vulnerabilities
Ubuntu USN Ubuntu USN USN-896-1 Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
References
Link Providers
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html cve-icon cve-icon
http://secunia.com/advisories/37242 cve-icon cve-icon
http://secunia.com/advisories/38770 cve-icon cve-icon
http://secunia.com/advisories/38772 cve-icon cve-icon
http://secunia.com/advisories/38847 cve-icon cve-icon
http://www.debian.org/security/2010/dsa-1999 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 cve-icon cve-icon
http://www.mozilla.org/security/announce/2010/mfsa2010-01.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0112.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0113.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0153.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0154.html cve-icon cve-icon
http://www.ubuntu.com/usn/USN-895-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-896-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0405 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0650 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=467005 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=501934 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=527567 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=528134 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=528300 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=530880 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=534082 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/56359 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2010-0159 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2010-0159 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:37 AM
Reserved
Jan 6, 2010, 12:00 AM
Status
Modified
Published
Feb 22, 2010, 1:00 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Critical
Public date
Feb 17, 2010, 12:00 AM