Security Advisory

CVE-2010-0220

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-01-07 19:00:00
Last updated 2024-08-07 00:45:11
Assigner mitre
State PUBLISHED

Description

The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.