CVE-2010-0159: canonical ubuntu_linux

Modified

Published 21-02-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-0159 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.75% chance of exploitation in the next 30 days, higher than 91.8% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 10, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

4.75%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 1

DSA-1999-1 OPENSUSE-SU-2024:10230-1 RHSA-2010:0112 RHSA-2010:0113 RHSA-2010:0153 RHSA-2010:0154

Timeline

21-02-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

4.75%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.75% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Mozilla3 products

firefox≥ 3.0, < 3.0.18 | ≥ 3.5, < 3.5.8
seamonkey< 2.0.3
thunderbird< 3.0.2

Canonical1 product

ubuntu_linuxEOL8.04 | 8.10 | 9.04 | 9.10

Debian1 product

debian_linuxEOL5.0

3 vendors · 5 products

References

31 links

www.ubuntu.com/usn/USN-895-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=534082X Refsource CONFIRMIssue TrackingVendor Advisory
www.redhat.com/support/errata/RHSA-2010-0153.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/38847Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0113.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2010:042Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=530880X Refsource CONFIRMIssue TrackingVendor Advisory

Show all 31 references

www.redhat.com/support/errata/RHSA-2010-0112.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2010/0650VDB EntryX Refsource VUPENThird Party Advisory
www.mozilla.org/security/announce/2010/mfsa2010-01.htmlX Refsource CONFIRMVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/56359VDB EntryX Refsource XFThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
secunia.com/advisories/38770Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=467005X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=528134X Refsource CONFIRMIssue TrackingVendor Advisory
www.debian.org/security/2010/dsa-1999Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0154.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=527567X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/38772Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-896-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.vupen.com/english/advisories/2010/0405VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/37242Third Party AdvisoryX Refsource SECUNIA
lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=528300X Refsource CONFIRMIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=501934X Refsource CONFIRMIssue TrackingVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485VDB EntrySignatureX Refsource OVALThird Party Advisory