CVE-2010-0164 Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of se...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 3.6 | No fix listed |
References
- MDVSA-2010:070 vendor-advisory
- www.mozilla.org vendor-advisory
- 20100402 ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability mailing-list
- 38918 vdb-entry
- 38921 vdb-entry
- ADV-2010-0692 vdb-entry
- www.zerodayinitiative.com
- bugzilla.mozilla.org exploit
- oval:org.mitre.oval:def:8703 signature vdb-entry