CVE-2010-0220
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox...
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
Exploit likelihood
What each source reports
NVD Score used
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
- Record
CVE-2010-0220- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
- Record
CVE-2010-0220- Updated
- 2026-11-02
EUVDEUVD-2010-0251 No score
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
- Record
EUVD-2010-0251- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-35p6-jmhj-fg2v No score
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox...
The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.
- Record
GHSA-35p6-jmhj-fg2v- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0220 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published January 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.
References
isc.sans.org/diary.html?storyid=7897
mandriva.com/security/advisories?name=MDVSA-2010:000
exchange.xforce.ibmcloud.com/vulnerabilities/55550
hg.mozilla.org/mozilla-central/rev/51396f6c9f20
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8292
mozilla.com/en-US/firefox/3.5.7/releasenotes
bugzilla.mozilla.org/show_bug.cgi?id=507114
nvd.nist.gov/vuln/detail/CVE-2010-0220
github.com/advisories/GHSA-35p6-jmhj-fg2v