CVEvulnerability
CVE-2010-0166
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.
Affected configurations
• mozilla firefox 3.6
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.mozilla.org/security/announce/2010/mfsa2010-11.html Vendor Advisory
- http://www.securityfocus.com/bid/38918 www.securityfocus.com
- http://www.securityfocus.com/bid/38943 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0692 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=538065 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182 oval.cisecurity.org
- http://www.mozilla.org/security/announce/2010/mfsa2010-11.html Vendor Advisory
- http://www.securityfocus.com/bid/38918 www.securityfocus.com
- http://www.securityfocus.com/bid/38943 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0692 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=538065 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182 oval.cisecurity.org