Lucene search
RootSSV:18933HistoryJan 13, 2010 - 12:00 a.m.
Mozilla Firefox observer服务远程拒绝服务漏洞
2010-01-1300:00:00
Root
www.seebug.org
8
0.017 Low
EPSS
Percentile
88.1%
CVE ID：CVE-2010-0220
Mozilla Firefox是一款流行的开源WEB浏览器。
Mozilla Firefox包含的xpcom/ds/nsObserverList.cpp文件中的 nsObserverList::FillObserverArray函数存在拒绝服务漏洞，攻击者构建大量网页诱使用户打开，可消耗大量内存资源并弹出低内存的警告对话框，并且还会尝试从空的observer数组中删除observer。造成拒绝服务攻击。
Mozilla Firefox 3.5.x
Mozilla Firefox 3.5.7已经修复此漏洞，建议用户下载使用：
http://hg.mozilla.org/mozilla-central/rev/51396f6c9f20
Related
cve
cve
CVE-2010-0220
2010-01-07 19:30:00
nessus
nessus
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1774)
2010-02-02 00:00:00
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1780)
2010-02-02 00:00:00
SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 6772)
2010-02-02 00:00:00
prion
prion
Design/Logic Flaw
2010-01-07 19:30:00
cvelist
cvelist
CVE-2010-0220
2010-01-07 19:00:00
openvas
openvas
Mandriva Update for firefox MDVSA-2010:000 (firefox)
2010-01-15 00:00:00
Firefox 'nsObserverList::FillObserverArray' DOS Vulnerability (Windows)
2010-01-13 00:00:00
Mandriva Update for firefox MDVSA-2010:000 (firefox)
2010-01-15 00:00:00
nvd
nvd
CVE-2010-0220
2010-01-07 19:30:00
ubuntucve
ubuntucve
CVE-2010-0220
2010-01-07 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00