CVE-2010-0169: Medium severity Mozilla SeaMonkey vulnerability
The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0169?
CVE-2010-0169 has a moderate severity rating, which suggests it may lead to unintended CSS processing issues in affected versions.
How do I fix CVE-2010-0169?
To mitigate CVE-2010-0169, upgrade to Mozilla Firefox versions 3.0.18, 3.5.8, or 3.6.2, or corresponding versions for Thunderbird and SeaMonkey.
Which versions of software are affected by CVE-2010-0169?
CVE-2010-0169 affects Mozilla Firefox versions before 3.0.18, 3.5.8, and 3.6.2, along with Thunderbird and SeaMonkey prior to their respective fixed versions.
Does CVE-2010-0169 impact user data?
CVE-2010-0169 primarily affects how stylesheets are processed and does not directly compromise user data security.
Is there a workaround for CVE-2010-0169?
The best approach for CVE-2010-0169 is to update the affected software versions, as no reliable workaround is recommended.