The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-01-07T19:00:00
Updated: 2024-08-07T00:45:11.278Z
Reserved: 2010-01-07T00:00:00
Link: CVE-2010-0220
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-01-07T19:30:00.403
Modified: 2024-11-21T01:11:47.073
Link: CVE-2010-0220
Redhat