CVE-2010-0159

EPSS 4.7%

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html https://bugzilla.mozilla.org/show_bug.cgi?id=467005 https://bugzilla.mozilla.org/show_bug.cgi?id=501934 https://bugzilla.mozilla.org/show_bug.cgi?id=527567 https://bugzilla.mozilla.org/show_bug.cgi?id=528134 https://bugzilla.mozilla.org/show_bug.cgi?id=528300 https://bugzilla.mozilla.org/show_bug.cgi?id=530880