Vulnerability in Mozilla Firefox

CVE-2010-2117

Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs.

EPSS: 0.018 (76.0th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox — versions 3.5.2, 3.5.6, 3.5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)