CVE-2010-0160

🟠 Łataj w tym tygodniu

Błąd w Web Worker w Firefoxie umożliwia zdalne wywołanie awarii aplikacji.

CVSS

10.0

EPSS

5.2%

Exploit

none

Vendor

mozilla

Opis źródłowy (NVD)

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

dos Brak patcha

Źródła i daty

Źródło	Wartość
NVD – CVSS	10.0
CISA KEV (aktywnie wykorzystywane)	Nie
FIRST EPSS (prawdopodobieństwo exploita)	5.2%
Opublikowano (NVD)	2010-02-22 13:00:02 UTC
Ostatnia modyfikacja (NVD)	2026-04-29 01:13:23 UTC

Referencje

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html (cve@mitre.org)
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html (cve@mitre.org)
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html (cve@mitre.org)
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html (cve@mitre.org)
http://secunia.com/advisories/37242 (cve@mitre.org) [Vendor Advisory]
http://secunia.com/advisories/38847 (cve@mitre.org)
http://www.debian.org/security/2010/dsa-1999 (cve@mitre.org)
http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 (cve@mitre.org)
http://www.mozilla.org/security/announce/2010/mfsa2010-02.html (cve@mitre.org) [Vendor Advisory]
http://www.redhat.com/support/errata/RHSA-2010-0112.html (cve@mitre.org)
http://www.securityfocus.com/archive/1/510533/100/0/threaded (cve@mitre.org)
http://www.ubuntu.com/usn/USN-895-1 (cve@mitre.org)
http://www.ubuntu.com/usn/USN-896-1 (cve@mitre.org)
http://www.vupen.com/english/advisories/2010/0405 (cve@mitre.org) [Patch, Vendor Advisory]
http://www.zerodayinitiative.com/advisories/ZDI-10-046 (cve@mitre.org)
https://bugzilla.mozilla.org/show_bug.cgi?id=531222 (cve@mitre.org)
https://bugzilla.mozilla.org/show_bug.cgi?id=533000 (cve@mitre.org)
https://bugzilla.mozilla.org/show_bug.cgi?id=534051 (cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/56360 (cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11166 (cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8465 (cve@mitre.org)