NetSight
IP …
critical9.3Public exploit code

CVE-2010-0167

The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 all…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.0, 3.0.1, 3.0.10, 3.0.11, 3.0.12, 3.0.13
MozillaSeamonkey
through 2.0.2
Versions 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4
MozillaThunderbird
through 3.0.1
Versions 1.5, 1.5.0.1, 1.5.0.2, 1.5.0.3, 1.5.0.4

Weakness classification

CWE-119

References