CVE-2010-0220 in Firefox

Résumé

par MITRE

The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 07/01/2010
• Divulgation: 07/01/2010
• Modérer: accepté
• Entrée: VDB-51460
• CPE: prêt
• CWE: CWE-399 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.01464
• KEV: non
• Activités: très faible
• Secteur: Hostingprovider, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-0220
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-0220
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-0220/