The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade www-client/seamonkey-bin.Upgrade net-libs/xulrunner.Upgrade www-client/mozilla-firefox.Upgrade www-client/icecat.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin. | Oct 30, 2017 | Jan 7, 2010 |
| Suse | — | Upgrade mozilla-nssUpgrade orbit2Upgrade libidl-x86Upgrade mozilla-xulrunner192-x86Upgrade gconf2-32bitUpgrade mozilla-xulrunner191-32bitUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-nsprUpgrade libfreebl3-x86Upgrade MozillaFirefox-branding-SLEDUpgrade libidl-32bitUpgrade orbit2-x86Upgrade libfreebl3Upgrade libidlUpgrade gconf2-x86Upgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-gnomeUpgrade gconf2Upgrade mozilla-xulrunner192-32bitUpgrade orbit2-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade mozilla-xulrunner191-gnomevfsUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nspr-32bitUpgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-nss-x86Upgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nss-32bitUpgrade MozillaFirefox | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade xulrunner-1.9.1 | Nov 19, 2024 | Jan 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub