4.3
CVE-2010-0181
- EPSS 2.22%
- Veröffentlicht 05.04.2010 17:30:00
- Zuletzt bearbeitet 16.06.2026 23:15:39
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.22% | 0.804 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
http://secunia.com/advisories/39136
http://www.vupen.com/english/advisories/2010/0748
http://www.mandriva.com/security/advisories?name=MDVSA-2010:070
http://secunia.com/advisories/39397
http://ubuntu.com/usn/usn-921-1
http://www.vupen.com/english/advisories/2010/0849
http://websecurity.com.ua/4206/
http://www.mozilla.org/security/announce/2010/mfsa2010-23.html
http://www.securityfocus.com/archive/1/511327/100/0/threaded
https://bugzilla.mozilla.org/show_bug.cgi?id=452093
https://exchange.xforce.ibmcloud.com/vulnerabilities/57395
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6776