CVE-2010-0167: Buffer Overflow
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0167?
CVE-2010-0167 has a medium severity rating, primarily due to the potential for denial of service and arbitrary code execution.
How do I fix CVE-2010-0167?
To fix CVE-2010-0167, users should update to the latest version of affected software, specifically Mozilla Firefox, Thunderbird, or SeaMonkey.
Which versions are affected by CVE-2010-0167?
CVE-2010-0167 affects Mozilla Firefox versions before 3.6.2, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3.
What types of attacks can exploit CVE-2010-0167?
CVE-2010-0167 can be exploited by remote attackers to cause memory corruption leading to application crashes and possible arbitrary code execution.
Is there any mitigation available for CVE-2010-0167?
The primary mitigation for CVE-2010-0167 is to upgrade all affected applications to their respective patched versions.