CVE-2010-0167

firefox/thunderbird/seamonkey: crashes with evidence of memory corruption (MFSA 2010-11)

Published Mar 25, 2010 CVSS 2.0 · 9.3 Critical EPSS 10.5% KEV · Not listed
Description
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:37 AM
Reserved
Jan 6, 2010, 12:00 AM
Status
Modified
Published
Mar 25, 2010, 9:00 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Critical
Public date
Mar 23, 2010, 12:00 AM