HOMEVULNERABILITIESCVE-2010-0159
CRITICAL

CVE-2010-0159

NVD-CWE-noinfoPublished: February 22, 2010· Updated: Jun 16, 2026

10.0
CVSS v3.1

Official Description

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

NVD Source

Technical Analysis

CVE-2010-0159 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges Req.
User Interaction
Scope
Impact
ConfidentialityC
IntegrityC
AvailabilityC
AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors & Products

Canonical1 product(s)
ubuntu linux
Debian1 product(s)
debian linux
Mozilla3 product(s)
firefoxseamonkeythunderbird
Source: NVD CPE · 8 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html
ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html
ADVISORYhttp://secunia.com/advisories/37242
ADVISORYhttp://secunia.com/advisories/38770
ADVISORYhttp://secunia.com/advisories/38772
ADVISORYhttp://secunia.com/advisories/38847
ADVISORYhttp://www.debian.org/security/2010/dsa-1999
ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:042
ADVISORYhttp://www.mozilla.org/security/announce/2010/mfsa2010-01.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0112.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0113.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0153.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0154.html
ADVISORYhttp://www.ubuntu.com/usn/USN-895-1
ADVISORYhttp://www.ubuntu.com/usn/USN-896-1
ADVISORYhttp://www.vupen.com/english/advisories/2010/0405
ADVISORYhttp://www.vupen.com/english/advisories/2010/0650
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=467005
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=501934
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=527567
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=528134
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=528300
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=530880
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=534082
ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56359
ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485
ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html
ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html
ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html
ADVISORYhttp://secunia.com/advisories/37242
ADVISORYhttp://secunia.com/advisories/38770
ADVISORYhttp://secunia.com/advisories/38772
ADVISORYhttp://secunia.com/advisories/38847
ADVISORYhttp://www.debian.org/security/2010/dsa-1999
ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:042
ADVISORYhttp://www.mozilla.org/security/announce/2010/mfsa2010-01.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0112.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0113.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0153.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2010-0154.html
ADVISORYhttp://www.ubuntu.com/usn/USN-895-1
ADVISORYhttp://www.ubuntu.com/usn/USN-896-1
ADVISORYhttp://www.vupen.com/english/advisories/2010/0405
ADVISORYhttp://www.vupen.com/english/advisories/2010/0650
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=467005
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=501934
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=527567
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=528134
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=528300
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=530880
ADVISORYhttps://bugzilla.mozilla.org/show_bug.cgi?id=534082
ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56359
ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485
ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590

All References (62)

→
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.htmlMailing List · Third Party Advisory
→
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.htmlMailing List · Third Party Advisory
→
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.htmlMailing List · Third Party Advisory
→
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.htmlMailing List · Third Party Advisory
→
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.htmlMailing List · Third Party Advisory
→
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.htmlMailing List · Third Party Advisory
→
http://secunia.com/advisories/37242Third Party Advisory
→
http://secunia.com/advisories/38770Third Party Advisory
→
http://secunia.com/advisories/38772Third Party Advisory
→
http://secunia.com/advisories/38847Third Party Advisory
→
http://www.debian.org/security/2010/dsa-1999Third Party Advisory
→
http://www.mandriva.com/security/advisories?name=MDVSA-2010:042Third Party Advisory
→
http://www.mozilla.org/security/announce/2010/mfsa2010-01.htmlVendor Advisory
→
http://www.redhat.com/support/errata/RHSA-2010-0112.htmlThird Party Advisory
→
http://www.redhat.com/support/errata/RHSA-2010-0113.htmlThird Party Advisory

Quick Facts

CVE IDCVE-2010-0159
CVSS Score10.0 / 10
SeverityCRITICAL
WeaknessNVD-CWE-noinfo
CISA KEVNo
Affected3 vendor(s)
PublishedFeb 22, 2010

Related CVEs (NVD-CWE-noinfo)

CVE-2006-4028
10.0
CVE-2006-4571
10.0
CVE-2006-3702
10.0
CVE-2006-3705
10.0
CVE-2010-0907
10.0
CVE-2009-0718
10.0

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2010-0159 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2010-0159·NVD