Mozilla Foundation Security Advisory 2010-53

Mozilla Foundation Security Advisory 2010-53 Title: Heap buffer overflow in nsTextFrameUtils::TransformText Impact: Critical Announced: September 7, 2010 Reporter: wushi Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

CVE-2010-3166: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run...