The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
Metrics
Affected Vendors & Products
References
History
Wed, 28 May 2025 14:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
Thu, 22 May 2025 04:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |

Status: PUBLISHED
Assigner: mitre
Published: 2010-01-07T19:00:00
Updated: 2024-08-07T00:45:11.278Z
Reserved: 2010-01-07T00:00:00
Link: CVE-2010-0220

No data.

Status : Deferred
Published: 2010-01-07T19:30:00.403
Modified: 2025-04-09T00:30:58.490
Link: CVE-2010-0220
