5

CVE-2010-1990

Exploit

Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.

Data is provided by the National Vulnerability Database (NVD)
MozillaFirefox Version3.6.1
MozillaFirefox Version3.6.2
MozillaFirefox Version3.6.3
MozillaFirefox Version3.5.1
MozillaFirefox Version3.5.2
MozillaFirefox Version3.5.3
MozillaFirefox Version3.5.4
MozillaFirefox Version3.5.5
MozillaFirefox Version3.5.6
MozillaFirefox Version3.5.7
MozillaFirefox Version <= 3.0.19
MozillaFirefox Version3.0
MozillaFirefox Version3.0.1
MozillaFirefox Version3.0.2
MozillaFirefox Version3.0.3
MozillaFirefox Version3.0.4
MozillaFirefox Version3.0.5
MozillaFirefox Version3.0.6
MozillaFirefox Version3.0.7
MozillaFirefox Version3.0.8
MozillaFirefox Version3.0.9
MozillaFirefox Version3.0.10
MozillaFirefox Version3.0.11
MozillaFirefox Version3.0.12
MozillaFirefox Version3.0.13
MozillaFirefox Version3.0.14
MozillaFirefox Version3.0.15
MozillaFirefox Version3.0.16
MozillaFirefox Version3.0.17
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.54% 0.65
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P