CVE-2010-0159 The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corr...
HighCVSS 10.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | >= 3.0, < 3.0.18 | 3.0.18 |
| mozilla Firefox | >= 3.5, < 3.5.8 | 3.5.8 |
| mozilla seamonkey | < 2.0.3 | 2.0.3 |
| mozilla Thunderbird | < 3.0.2 | 3.0.2 |
| debian linux | = 5.0 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
| Canonical Ubuntu Linux | = 9.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.10 | No fix listed |
References
- FEDORA-2010-1932 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-1936 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-1727 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-3230 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-3267 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2010:015 mailing-list third-party-advisory vendor-advisory
- 37242 third-party-advisory
- 38770 third-party-advisory
- 38772 third-party-advisory
- 38847 third-party-advisory
- DSA-1999 third-party-advisory vendor-advisory
- MDVSA-2010:042 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- RHSA-2010:0112 third-party-advisory vendor-advisory
- RHSA-2010:0113 third-party-advisory vendor-advisory
- RHSA-2010:0153 third-party-advisory vendor-advisory
- RHSA-2010:0154 third-party-advisory vendor-advisory
- USN-895-1 third-party-advisory vendor-advisory
- USN-896-1 third-party-advisory vendor-advisory
- ADV-2010-0405 third-party-advisory vdb-entry
- ADV-2010-0650 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- mozilla-browsereng-code-execution(56359) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:8485 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9590 signature third-party-advisory vdb-entry