Vulnerabilities > CVE-2010-2117 - Resource Management Errors vulnerability in Mozilla Firefox

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
mozilla
CWE-399
NVD
Published: 2010-06-01
Updated: 2018-10-10

Summary

Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.

Vulnerable Configurations

Part Description Count
Application
Mozilla
11

Common Weakness Enumeration (CWE)

Oval

accepted2014-10-06T04:00:11.630-04:00
classvulnerability
contributors
  • namePreeti Subramanian
    organizationSecPod Technologies
  • nameSergey Artykhov
    organizationALTX-SOFT
  • nameSergey Artykhov
    organizationALTX-SOFT
  • nameEvgeniy Pavlov
    organizationALTX-SOFT
  • nameEvgeniy Pavlov
    organizationALTX-SOFT
  • nameEvgeniy Pavlov
    organizationALTX-SOFT
definition_extensions
commentMozilla Firefox Mainline release is installed
ovaloval:org.mitre.oval:def:22259
descriptionMozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
familywindows
idoval:org.mitre.oval:def:11190
statusaccepted
submitted2010-08-11T14:24:29
titleDenial of Service Vulnerability in Mozilla Firefox 3.0.19 and before, 3.5.x and 3.6.x
version26

References