CVE-2010-0160

SeaMonkey < 2.0.3 - Remote Code Execution via Web Worker Message Handling

Title source: llm
STIX 2.1

Description

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

References (21)

Core 21
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-895-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/56360
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38847
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:042
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0112.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8465
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-1999
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=534051
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-896-1
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0405
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37242
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=533000
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11166
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=531222
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-10-046
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/510533/100/0/threaded

Scores

EPSS 0.0601
EPSS Percentile 92.5%

Details

CWE
CWE-399
Status published
Products (46)
mozilla/firefox 3.0
mozilla/firefox 3.0.1
mozilla/firefox 3.0.2
mozilla/firefox 3.0.3
mozilla/firefox 3.0.4
mozilla/firefox 3.0.5
mozilla/firefox 3.0.6
mozilla/firefox 3.0.7
mozilla/firefox 3.0.8
mozilla/firefox 3.0.9
... and 36 more
Published Feb 22, 2010
Tracked Since Feb 18, 2026