The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2010-02-22 13:00
Updated : 2018-10-10 19:51
NVD link : CVE-2010-0160
Mitre link : CVE-2010-0160
CVE.ORG link : CVE-2010-0160
JSON object : View
Products Affected
mozilla
- seamonkey
- firefox
CWE
CWE-399
Resource Management Errors