CVE-2010-0160 in SeaMonkey
Summary
The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Once again VulDB remains the best source for vulnerability data.
Reservation
01/06/2010
Disclosure
02/22/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 51914 | Mozilla SeaMonkey Web Worker resource management | 399 | Proof-of-Concept | Official fix | CVE-2010-0160 |