Candidate: CVE-2010-0165 PublicDate: 2010-03-25 21:00:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0165 http://www.mozilla.org/security/announce/2010/mfsa2010-11.html Description: The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function. Ubuntu-Description: Notes: Bugs: https://bugzilla.mozilla.org/show_bug.cgi?id=542849 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_firefox: upstream_firefox: released (3.6.2) dapper_firefox: ignored (reached end-of-life) hardy_firefox: not-affected intrepid_firefox: DNE jaunty_firefox: DNE karmic_firefox: DNE devel_firefox: released (3.6.3+nobinonly-0ubuntu2)