CVEvulnerability
CVE-2010-0160
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Affected configurations
• mozilla firefox (<= 3.0.17)
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
• mozilla firefox 3.0.6
• mozilla firefox 3.0.7
• mozilla firefox 3.0.8
• mozilla firefox 3.0.9
• mozilla firefox 3.0.10
• mozilla firefox 3.0.11
• mozilla firefox 3.0.12
• mozilla firefox 3.0.13
• mozilla firefox 3.0.14
• mozilla firefox 3.0.15
• mozilla firefox 3.0.16
• mozilla firefox 3.5
• mozilla firefox 3.5.1
• mozilla firefox 3.5.2
• mozilla firefox 3.5.3
• mozilla firefox 3.5.4
• mozilla firefox 3.5.5
• mozilla firefox 3.5.6
• mozilla firefox 3.5.7
• mozilla seamonkey (<= 2.0.2)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/37242 Vendor Advisory
- http://secunia.com/advisories/38847 secunia.com
- http://www.debian.org/security/2010/dsa-1999 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-02.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0112.html www.redhat.com
- http://www.securityfocus.com/archive/1/510533/100/0/threaded www.securityfocus.com
- http://www.ubuntu.com/usn/USN-895-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-896-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/0405 Patch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-046 www.zerodayinitiative.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=531222 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=533000 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=534051 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56360 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11166 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8465 oval.cisecurity.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/37242 Vendor Advisory
- http://secunia.com/advisories/38847 secunia.com
- http://www.debian.org/security/2010/dsa-1999 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-02.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0112.html www.redhat.com
- http://www.securityfocus.com/archive/1/510533/100/0/threaded www.securityfocus.com
- http://www.ubuntu.com/usn/USN-895-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-896-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/0405 Patch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-046 www.zerodayinitiative.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=531222 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=533000 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=534051 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56360 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11166 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8465 oval.cisecurity.org