CVE-2010-1990

Firefox < 3.0.19 and SeaMonkey - Denial of Service via IFRAME mailto: URL

Title source: llm
STIX 2.1

Description

Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.

References (3)

Core 3
Core References
Exploit x_refsource_misc
http://websecurity.com.ua/4206/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/511327/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12386

Scores

EPSS 0.0205
EPSS Percentile 79.1%

Details

CWE
CWE-399
Status published
Products (30)
mozilla/firefox 3.6.1
mozilla/firefox 3.6.2
mozilla/firefox 3.6.3
mozilla/firefox 3.5.1
mozilla/firefox 3.5.2
mozilla/firefox 3.5.3
mozilla/firefox 3.5.4
mozilla/firefox 3.5.5
mozilla/firefox 3.5.6
mozilla/firefox 3.5.7
... and 20 more
Published May 20, 2010
Tracked Since Feb 18, 2026