Vulnerability in Mozilla Firefox

CVE-2010-2755

layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.

EPSS: 0.041 (89.8th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox — versions 3.6.7
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)