CVE-2010-0159

CRITICAL 10.0CVE-2010-0159 · Published 22/02/2010 · updated 16/06/2026

In short

CVE-2010-0159 is a CRITICAL (CVSS 10.0) vulnerability affecting firefox (mozilla), seamonkey (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 4.7%, higher than 91.9% of all vulnerabilities.
Fix: update to 3.0.18, 3.5.8, 2.0.3, 3.0.2 or later.

Package	Affected versions	Patched versions
firefox mozilla	`≥ 3.0, < 3.0.18≥ 3.5, < 3.5.8`	`3.0.183.5.8`
seamonkey mozilla	`< 2.0.3`	`2.0.3`
thunderbird mozilla	`< 3.0.2`	`3.0.2`

Description

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

References

lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html · Mailing List
secunia.com/advisories/37242 · Third Party Advisory
secunia.com/advisories/38770 · Third Party Advisory
secunia.com/advisories/38772 · Third Party Advisory
secunia.com/advisories/38847 · Third Party Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free