CVE-2010-0177

Mozilla Dangling pointer vulnerability in nsPluginArray

Published Apr 5, 2010 CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Description
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2027-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0208 Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
Ubuntu USN Ubuntu USN USN-920-1 Firefox 3.0 and Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-921-1 Firefox 3.5 and Xulrunner vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:37 AM
Reserved
Jan 6, 2010, 12:00 AM
Status
Modified
Published
Apr 5, 2010, 5:30 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Critical
Public date
Mar 30, 2010, 12:00 AM