Vulnerability Details CVE-2010-2117
Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://websecurity.com.ua/4238/
- http://www.securityfocus.com/archive/1/511509/100/0/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11190
- http://websecurity.com.ua/4238/
- http://www.securityfocus.com/archive/1/511509/100/0/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11190
Products affected by CVE-2010-2117
-
cpe:2.3:a:mozilla:firefox:3.0.19
-
cpe:2.3:a:mozilla:firefox:3.5
-
cpe:2.3:a:mozilla:firefox:3.5.1
-
cpe:2.3:a:mozilla:firefox:3.5.2
-
cpe:2.3:a:mozilla:firefox:3.5.3
-
cpe:2.3:a:mozilla:firefox:3.5.4
-
cpe:2.3:a:mozilla:firefox:3.5.5
-
cpe:2.3:a:mozilla:firefox:3.5.6
-
cpe:2.3:a:mozilla:firefox:3.5.7
-
cpe:2.3:a:mozilla:firefox:3.5.9
-
cpe:2.3:a:mozilla:firefox:3.6