PT-2010-1978 · Mozilla · Firefox

Regenrecht · Publicado 2010-03-25 · Atualizado 2024-12-12 · CVE-2010-0164

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.2

Description The issue is related to a use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function. This vulnerability can be triggered by a multipart/x-mixed-replace animation where frames have different bits-per-pixel (bpp) values, potentially leading to a denial of service (heap memory corruption and application crash) or possibly allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 3.6.2, update to version 3.6.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of multipart/x-mixed-replace animations with varying bits-per-pixel values until the update is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0164

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

ZDI-10-047

Produtos afetados

Firefox

Referências · 2068

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=547143 · Exploit
• https://suse.com/security/cve/CVE-2023-6856 · Nota
• https://suse.com/security/cve/CVE-2024-4778 · Nota
• https://suse.com/security/cve/CVE-2019-11751 · Nota
• https://suse.com/security/cve/CVE-2017-5441 · Nota
• https://suse.com/security/cve/CVE-2023-6861 · Nota
• https://suse.com/security/cve/CVE-2015-0817 · Nota
• https://suse.com/security/cve/CVE-2021-23965 · Nota
• https://suse.com/security/cve/CVE-2016-9899 · Nota
• https://suse.com/security/cve/CVE-2014-1562 · Nota
• https://suse.com/security/cve/CVE-2015-7176 · Nota
• https://suse.com/security/cve/CVE-2023-32206 · Nota
• https://suse.com/security/cve/CVE-2017-5406 · Nota
• https://suse.com/security/cve/CVE-2016-5272 · Nota
• https://suse.com/security/cve/CVE-2012-3961 · Nota