Lucene search
MitreCVE-2010-2117HistoryJun 01, 2010 - 8:30 p.m.
CVE-2010-2117
2010-06-0120:30:02
CWE-399
mitre
web.nvd.nist.gov
33
cve-2010-2117
mozilla firefox
denial of service
javascript
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7
Confidence
High
EPSS
0.006
Percentile
78.3%
Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
Affected configurations
Node
mozillafirefoxMatch3.0.19
ORmozillafirefoxMatch3.5
ORmozillafirefoxMatch3.5.1
ORmozillafirefoxMatch3.5.2
ORmozillafirefoxMatch3.5.3
ORmozillafirefoxMatch3.5.4
ORmozillafirefoxMatch3.5.5
ORmozillafirefoxMatch3.5.6
ORmozillafirefoxMatch3.5.7
ORmozillafirefoxMatch3.5.9
ORmozillafirefoxMatch3.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | 3.0.19 | cpe:2.3:a:mozilla:firefox:3.0.19:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5 | cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.1 | cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.2 | cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.3 | cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.4 | cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.5 | cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.6 | cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.7 | cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:* |
| mozilla | firefox | 3.5.9 | cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2010-2117
2010-06-01 20:00:00
openvas
openvas
Mozilla Firefox 'IFRAME' Denial Of Service vulnerability (Windows)
2010-06-04 00:00:00
Mozilla Firefox 'IFRAME' DoS Vulnerability - Windows
2010-06-04 00:00:00
prion
prion
Code injection
2010-06-01 20:30:00
ubuntucve
ubuntucve
CVE-2010-2117
2010-06-01 00:00:00
nvd
nvd
CVE-2010-2117
2010-06-01 20:30:02
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7
Confidence
High
EPSS
0.006
Percentile
78.3%
Related for CVE-2010-2117