CVE-2010-2117
EUVD-2010-213301.06.2010, 20:30
Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 3.0.19 |
| mozilla | firefox | 3.5 |
| mozilla | firefox | 3.5.1 |
| mozilla | firefox | 3.5.2 |
| mozilla | firefox | 3.5.3 |
| mozilla | firefox | 3.5.4 |
| mozilla | firefox | 3.5.5 |
| mozilla | firefox | 3.5.6 |
| mozilla | firefox | 3.5.7 |
| mozilla | firefox | 3.5.9 |
| mozilla | firefox | 3.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||
| xulrunner |
| ||||||||||
| xulrunner-1.9 |
| ||||||||||
| xulrunner-1.9.1 |
| ||||||||||
| xulrunner-1.9.2 |
|
Common Weakness Enumeration
References