CVE-2010-0160: mozilla firefox Resource Management Errors
Vulnerability summary
CVE-2010-0160 is a high (CVSS 10.0) Resource Management Errors vulnerability in mozilla firefox. EPSS estimates a 5.96% chance of exploitation in the next 30 days, higher than 93.2% of scored vulnerabilities.
Not severe (CVSS 10, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 21-02-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.96%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
No change 0.00 pp
From 5.96% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Mozilla2 products
- firefox≤ 3.0.17 | 3.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.15 | 3.0.16 | 3.5 | 3.5.1 | 3.5.2 | 3.5.3 | 3.5.4 | 3.5.5 | 3.5.6 | 3.5.7
- seamonkey≤ 2.0.2 | 1.0 | 1.0:alpha | 1.0:beta | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.0.9 | 1.1 | 1.1:alpha | 1.1:beta | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 1.1.6 | 1.1.7 | 1.1.8 | 1.1.9 | 1.1.10 | 1.1.11 | 1.1.12 | 1.1.13 | 1.1.14 | 1.1.15 | 1.1.16 | 1.1.17 | 2.0 | 2.0:alpha_1 | 2.0:alpha_2 | 2.0:alpha_3 | 2.0:beta_1 | 2.0:beta_2 | 2.0:rc1 | 2.0:rc2 | 2.0.1
1 vendor · 2 products
References
21 links- lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.htmlVendor AdvisoryX Refsource FEDORA
- lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.htmlVendor AdvisoryX Refsource FEDORA
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8465VDB EntrySignatureX Refsource OVAL
Show all 21 references
- bugzilla.mozilla.org/show_bug.cgi?id=534051X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.htmlVendor AdvisoryX Refsource FEDORA
- bugzilla.mozilla.org/show_bug.cgi?id=533000X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11166VDB EntrySignatureX Refsource OVAL
- bugzilla.mozilla.org/show_bug.cgi?id=531222X Refsource CONFIRM
- www.zerodayinitiative.com/advisories/ZDI-10-046X Refsource MISC