CVE-2010-1990: Medium severity Mozilla Firefox vulnerability
Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1990?
CVE-2010-1990 is classified as a moderate severity vulnerability due to potential denial of service attacks.
How do I fix CVE-2010-1990?
To fix CVE-2010-1990, users should upgrade to the latest version of Mozilla Firefox or SeaMonkey.
What types of applications are affected by CVE-2010-1990?
CVE-2010-1990 affects Mozilla Firefox versions 3.0 through 3.6.x and SeaMonkey, which can lead to excessive mail application launches.
Can CVE-2010-1990 be exploited remotely?
Yes, CVE-2010-1990 can be exploited remotely through specially crafted HTML documents containing multiple IFRAMEs.
What are the risks associated with CVE-2010-1990?
The risks of CVE-2010-1990 include potential denial of service, leading to system instability and degraded user experiences.