Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-0183

Fixed in a distro release EPSS 4%

Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.

Published 2010-06-23 · CVE record · OSV

Products: mozilla firefox, mozilla seamonkey

Distro releases

ReleasePackageFixed in
Debian 5.0xulrunner1.9.0.19-2