CVE

Id
42751  
CVE No.
CVE-2010-0167  
Status
Candidate  
Description
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465914 42751 CVE-2010-0167 CONFIRM:http://www.mozilla.org/security/announce/2010/mfsa2010-11.html  View
465915 42751 CVE-2010-0167 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=534082  View
465916 42751 CVE-2010-0167 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=535641  View
465917 42751 CVE-2010-0167 MANDRIVA:MDVSA-2010:070  View
465918 42751 CVE-2010-0167 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:070  View
465919 42751 CVE-2010-0167 BID:38918  View
465920 42751 CVE-2010-0167 URL:http://www.securityfocus.com/bid/38918  View
465921 42751 CVE-2010-0167 BID:38944  View
465922 42751 CVE-2010-0167 URL:http://www.securityfocus.com/bid/38944  View
465923 42751 CVE-2010-0167 OVAL:oval:org.mitre.oval:def:8610  View
465924 42751 CVE-2010-0167 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8610  View
465925 42751 CVE-2010-0167 OVAL:oval:org.mitre.oval:def:9835  View
465926 42751 CVE-2010-0167 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9835  View
465927 42751 CVE-2010-0167 VUPEN:ADV-2010-0692  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35428 JVNDB-2010-001208 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品には、同一生成元を越えたキーストロークをキャプチャされ、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2010-0171 42751 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001208.html  View