CVE-2010-0159: Critical severity Mozilla Firefox vulnerability
The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0159?
CVE-2010-0159 has a moderate severity rating due to the potential for denial of service and memory corruption.
How do I fix CVE-2010-0159?
To fix CVE-2010-0159, upgrade to Firefox version 3.0.18 or later, 3.5.8 or later, Thunderbird 3.0.2 or later, or SeaMonkey 2.0.3 or later.
Which versions of Firefox are affected by CVE-2010-0159?
CVE-2010-0159 affects Firefox versions prior to 3.0.18 and 3.5.8.
Can CVE-2010-0159 allow remote code execution?
Yes, CVE-2010-0159 may allow remote attackers to execute arbitrary code under certain conditions.
Is CVE-2010-0159 only applicable to Mozilla products?
CVE-2010-0159 specifically affects Mozilla Firefox, Thunderbird, and SeaMonkey, along with certain Linux distributions using these browsers.