Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-0164
HistoryMar 25, 2010 - 9:00 p.m.

CVE-2010-0164

2010-03-2521:00:00
CWE-399
mitre
web.nvd.nist.gov
41
cve-2010-0164
mozilla
firefox
use-after-free vulnerability
nvd
heap memory corruption
arbitrary code execution
remote attackers

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.8

Confidence

High

EPSS

0.072

Percentile

94.1%

JSON

Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.

Affected configurations

Nvd
Node
mozillafirefoxMatch3.6
VendorProductVersionCPE
mozillafirefox3.6cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*

Related

zdi 1
cvelist 1
securityvulns 3
nvd 1
prion 1
mozilla 1
seebug 1
ubuntucve 1
openvas 17
nessus 4
gentoo 1
zdi
zdi
Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability
2010-04-02 00:00:00
cvelist
cvelist
CVE-2010-0164
2010-03-25 20:31:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-09
2010-04-06 00:00:00
ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability
2010-04-06 00:00:00
Многочисленные уязвимости в Mozilla Firefox / Seamonkey multiple security vulnerabilities
2013-08-20 00:00:00
nvd
nvd
CVE-2010-0164
2010-03-25 21:00:00
prion
prion
Design/Logic Flaw
2010-03-25 21:00:00
mozilla
mozilla
Deleted frame reuse in multipart/x-mixed-replace image — Mozilla
2010-03-23 00:00:00
seebug
seebug
Mozilla Firefox 3.6 libpr0n库远程代码执行漏洞
2010-03-24 00:00:00
ubuntucve
ubuntucve
CVE-2010-0164
2010-03-25 00:00:00
openvas
openvas
Firefox Multiple Vulnerabilities (Mar 2010) - Windows
2010-03-30 00:00:00
Firefox Multiple Vulnerabilities Mar-10 (Linux)
2010-03-30 00:00:00
Firefox Multiple Vulnerabilities Mar-10 (Windows)
2010-03-30 00:00:00
nessus
nessus
Mozilla Firefox < 3.6.2 Multiple Vulnerabilities.
2010-03-23 00:00:00
Firefox 3.6.x < 3.6.2 Multiple Vulnerabilities
2010-03-23 00:00:00
Mandriva Linux Security Advisory : firefox (MDVSA-2010:070-1)
2010-04-14 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.8

Confidence

High

EPSS

0.072

Percentile

94.1%

JSON
Related for CVE-2010-0164
zdi1cvelist1securityvulns3nvd1prion1mozilla1seebug1ubuntucve1openvas17nessus4gentoo1