CVE-2010-0166 EXPLOIT
5.1
MEDIUM · CVSS 2.0 · EPSS 6.9% (pctl 94)
Patch early
A public exploit exists.
Description
The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.
Scoring
| CVSS | 5.1 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:P/I:P/A:P |
| EPSS | 6.89% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-03-25 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| apple | mac os x |
| mozilla | firefox |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Mozilla Firefox 3.6 - 'gfxTextRun::SanitizeGlyphRuns()' Remote Memory Corruption | 2010-03-24 |
References
- http://www.mozilla.org/security/announce/2010/mfsa2010-11.html
- http://www.securityfocus.com/bid/38918
- http://www.securityfocus.com/bid/38943
- http://www.vupen.com/english/advisories/2010/0692
- https://bugzilla.mozilla.org/show_bug.cgi?id=538065
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182
- http://www.mozilla.org/security/announce/2010/mfsa2010-11.html
- http://www.securityfocus.com/bid/38918
- http://www.securityfocus.com/bid/38943
- http://www.vupen.com/english/advisories/2010/0692
- https://bugzilla.mozilla.org/show_bug.cgi?id=538065
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182
→ the Explorer · watch your stack · NVD