CVE-2010-0160
Fixed in a distro release EPSS 6%
The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
Products: mozilla firefox, mozilla seamonkey
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.18-1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.18-1.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.18-1.el5_4 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.18-1.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.18-1.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.18-1.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.18-1.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.18-1.el5_4 |