VYPR
Unrated severityNVD Advisory· Published Feb 22, 2010· Updated Jun 16, 2026

CVE-2010-0159

CVE-2010-0159

Description

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: >=3.0,<3.0.18
    • (no CPE)range: >=3.0, <=3.0.18; >=3.5, <=3.5.8
  • cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*range: <2.0.3
    • (no CPE)range: <2.0.3
  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*range: <3.0.2
    • (no CPE)range: <3.0.2
  • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

31

News mentions

0

No linked articles in our index yet.