CVE

Id
42748  
CVE No.
CVE-2010-0164  
Status
Candidate  
Description
Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465882 42748 CVE-2010-0164 BUGTRAQ:20100402 ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability  View
465883 42748 CVE-2010-0164 URL:http://www.securityfocus.com/archive/1/archive/1/510535/100/0/threaded  View
465884 42748 CVE-2010-0164 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-047  View
465885 42748 CVE-2010-0164 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-09.html  View
465886 42748 CVE-2010-0164 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=547143  View
465887 42748 CVE-2010-0164 MANDRIVA:MDVSA-2010:070  View
465888 42748 CVE-2010-0164 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:070  View
465889 42748 CVE-2010-0164 BID:38918  View
465890 42748 CVE-2010-0164 URL:http://www.securityfocus.com/bid/38918  View
465891 42748 CVE-2010-0164 BID:38921  View
465892 42748 CVE-2010-0164 URL:http://www.securityfocus.com/bid/38921  View
465893 42748 CVE-2010-0164 OVAL:oval:org.mitre.oval:def:8703  View
465894 42748 CVE-2010-0164 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8703  View
465895 42748 CVE-2010-0164 VUPEN:ADV-2010-0692  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35430 JVNDB-2010-001210 Mozilla Firefox の nsDocument::MaybePreLoadImage 関数におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox の画像プレロード実装における content/base/src/nsDocument.cpp の nsDocument::MaybePreLoadImage 関数には、画像の URL にスキーマの制限事項、またはポリシーの制限事項が適用されないため、サービス運用妨害 (DoS) 状態となる、またはブラウザのアドオン機能を乗っ取られる脆弱性が存在します。 CVE-2010-0168 42748 7.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001210.html  View