Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS X allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted font in a data: URL.
                
            Metrics
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Complete
Integrity Impact Complete
Availability Impact Complete
        
        AV:N/AC:M/Au:N/C:C/I:C/A:C
    
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
| Vendors | Products | 
|---|---|
| Apple | 
                        
  | 
                
| Mozilla | 
                        
  | 
                
Configuration 1 [-]
| AND | 
                        
                        
 
  | 
                
Configuration 2 [-]
| AND | 
                        
                        
 
  | 
                
Configuration 3 [-]
| AND | 
                        
                        
 
  | 
                
Configuration 4 [-]
| AND | 
                        
                        
 
  | 
                
No data.
References
        History
                    No history.
Status: PUBLISHED
Assigner: mitre
Published: 2010-09-09T18:00:00
Updated: 2024-08-07T02:46:48.101Z
Reserved: 2010-07-14T00:00:00
Link: CVE-2010-2770
No data.
Status : Deferred
Published: 2010-09-09T19:00:02.610
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-2770
No data.
ReportizFlow