CVE-2010-0165 The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption....
HighCVSS 9.3
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 3.6 | No fix listed |
References
- MDVSA-2010:070 vendor-advisory
- www.mozilla.org vendor-advisory
- 38918 vdb-entry
- ADV-2010-0692 vdb-entry
- bugzilla.mozilla.org
- oval:org.mitre.oval:def:8472 signature vdb-entry