Mozilla Foundation Security Advisory 2010-11

Mozilla Foundation Security Advisory 2010-11 Title: Crashes with evidence of memory corruption rv:1.9.2.2/ 1.9.1.8/ 1.9.0.18 Impact: Critical Announced: March 23, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.8 Firefo...

CVE-2010-0166

CVE-2010-0166 affects Mozilla Firefox 3.6 before 3.6.2 on macOS, due to a flaw in gfxTextRun::SanitizeGlyphRuns in gfx/thebes/src/gfxFont.cpp. The Core Text path mishandles deletions of certain invisible Unicode characters (notably U+FEFF, U+FFF9, U+FFFA, U+FFFB), enabling memory corruption that ...