CVE-2010-1987: Medium severity Mozilla Firefox vulnerability
Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (memory consumption, out-of-bounds read, and application crash) via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring operations, related to the DoubleWideCharMappedString class in USP10.dll and the gfxWindowsFontGroup::GetUnderlineOffset function in xul.dll, a different vulnerability than CVE-2009-1571.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1987?
CVE-2010-1987 has a moderate severity level due to its potential to cause denial of service and application crashes.
How do I fix CVE-2010-1987?
To fix CVE-2010-1987, upgrade Mozilla Firefox to a version later than 3.6.3.
Which versions of Firefox are affected by CVE-2010-1987?
CVE-2010-1987 affects Mozilla Firefox version 3.6.3 on Windows XP SP3.
What impact does CVE-2010-1987 have on users?
CVE-2010-1987 can lead to memory consumption and crashes, resulting in a denial of service for users.
Is there a workaround for CVE-2010-1987?
There are no official workarounds for CVE-2010-1987; the recommended action is to update Firefox.