NVD

Id
11741  
Name
CVE-2010-0166  
Description
The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-03-25  
Modified Date
2012-01-26  
Seq
2010-0166  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64499 11741 CVE-2010-0166 oval:org.mitre.oval:def:14182  View
64500 11741 CVE-2010-0166 http://www.mozilla.org/security/announce/2010/mfsa2010-11.html  View
64501 11741 CVE-2010-0166 38918  View
64502 11741 CVE-2010-0166 38943  View
64503 11741 CVE-2010-0166 ADV-2010-0692  View
64504 11741 CVE-2010-0166 https://bugzilla.mozilla.org/show_bug.cgi?id=538065  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35434 JVNDB-2010-001214 Mac OS X 上で稼働する Mozilla Firefox の gfxTextRun::SanitizeGlyphRuns 関数における任意のコードを実行される脆弱性 Mac OS X 上で稼働する Mozilla Firefox のブラウザエンジンにおける gfxTextRun::SanitizeGlyphRuns 関数には、Core Text API を使用している場合、削除を実行する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0166 42746 CVE-2010-0166 11741 5.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001214.html 2010-03-23 2010-04-07 View