Lucene search
Mozilla FoundationMFSA2010-02HistoryFeb 17, 2010 - 12:00 a.m.
Web Worker Array Handling Heap Corruption Vulnerability — Mozilla
2010-02-1700:00:00
Mozilla Foundation
www.mozilla.org
15
0.391 Low
EPSS
Percentile
97.2%
Security researcher Orlando Barrera II of SecTheory reported, via TippingPoint’s Zero Day Initiative, that Mozilla’s implementation of Web Workers contained an error in its handling of array data types when processing posted messages. This error could be used by an attacker to corrupt heap memory and crash the browser, potentially running arbitrary code on a victim’s computer.
Related
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:44:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-02
2010-02-19 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-02-25 00:00:00
cvelist
cvelist
CVE-2010-0160
2010-02-21 17:00:00
prion
prion
Memory corruption
2010-02-22 13:00:00
cve
cve
CVE-2010-0160
2010-02-22 13:00:00
ubuntucve
ubuntucve
CVE-2010-0160
2010-02-17 00:00:00
zdi
zdi
Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability
2010-04-02 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities feb-10 (Linux)
2010-02-26 00:00:00
Mozilla Products Multiple Vulnerabilities (MFSA2010-05) - Linux
2010-02-26 00:00:00
Mozilla Products Multiple Vulnerabilities (Feb 2010) - Windows
2010-02-26 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: galeon-2.0.7-20.fc11
2010-02-20 00:15:26
[SECURITY] Fedora 11 Update: google-gadgets-0.11.1-5.fc11
2010-02-20 00:15:26
[SECURITY] Fedora 12 Update: firefox-3.5.8-1.fc12
2010-02-20 00:29:04
nessus
nessus
SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 2033)
2010-02-25 00:00:00
Debian DSA-1999-1 : xulrunner - several vulnerabilities
2010-02-24 00:00:00
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6867)
2010-10-11 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-02-18 00:00:00
ubuntu
ubuntu
Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
2010-02-17 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2010-02-17 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-02-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey
2010-03-04 16:53:48
debian
debian
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
2010-02-18 20:05:36
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:02:49
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:11:52
oraclelinux
oraclelinux
firefox security update
2010-02-17 00:00:00
centos
centos
firefox, xulrunner security update
2010-02-18 00:33:18
redhat
redhat
(RHSA-2010:0112) Critical: firefox security update
2010-02-17 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00