CVE-2010-0167
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3...
9.3 HighPublic exploit
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
Exploit likelihood
10.5%Down 23.9 points since Feb 4, 2022
What each source reports
NVD Score used
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
- Record
CVE-2010-0167- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
- Record
CVE-2010-0167- Updated
- 2026-11-02
EUVDEUVD-2010-0198 No score
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
- Record
EUVD-2010-0198- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pfj8-2727-hwr9 No score
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3...
The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
- Record
GHSA-pfj8-2727-hwr9- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 7 CVEs |
before 1.9.0.18-1, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 14 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.18-1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:3.0.18-1.el4 | 0:3.0.18-1.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0.18-1.el5_4 | 0:3.0.18-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0.18-1.el5_4 | 0:3.0.18-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0.18-1.el5_4 | 0:3.0.18-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0.18-1.el5_4 | 0:3.0.18-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:1.9.0.18-1.el5_4 | 0:1.9.0.18-1.el5_4 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla Firefox/Thunderbird/SeaMonkey - Multiple Memory Corruption Vulnerabilities | 2010-03-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0167 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published February 18, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.5%, the 95th percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=534082
securityfocus.com/bid/38918
mandriva.com/security/advisories?name=MDVSA-2010:070
vupen.com/english/advisories/2010/0692
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8610
Show 194 moreShow less
mozilla.org/security/announce/2010/mfsa2010-11.html
nvd.nist.gov/vuln/detail/CVE-2010-0167
github.com/advisories/GHSA-pfj8-2727-hwr9
access.redhat.com/errata/RHSA-2010:0112
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=566047
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0112.json
cve.org/CVERecord?id=CVE-2009-1571
suse.com/security/cve/CVE-2008-5913
This page doesn't list everything
Left out here: 745 references. The JSON record has them.