[ MDVSA-2010:000 ] firefox

[dude67]

_______________________________________________________________________

Package : firefox
Date : January 10, 2090
Affected: 2010.0
_______________________________________________________________________

Problem Description:

Security issues were identified and fixed in firefox 3.5.x:

The nsObserverList::FillObserverArray function in
xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows
remote attackers to cause a denial of service (application crash)
via a crafted web site that triggers memory consumption and an
accompanying Low Memory alert dialog, and also triggers attempted
removal of an observer from an empty observers array (CVE-2010-0220).

Additionally, some packages which require so, have been rebuilt and
are being provided as updates.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=
http://www.mozilla.org/security/known-v ... refox3.5.7
_______________________________________________________________________