Candidate: CVE-2010-2117
PublicDate: 2010-06-01 20:30:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2117
Description:
 Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to cause a
 denial of service (resource consumption) via JavaScript code containing an
 infinite loop that creates IFRAME elements for invalid (1) news:// or (2)
 nntp:// URIs.
Ubuntu-Description:
Notes:
 jdstrand> CVEs in Firefox are tracked in the xulrunner source packages. The
  mapping of xulrunner sources to firefox is:
   xulrunner (1.8.0): firefox (1.5) - Ubuntu 6.06 LTS
   xulrunner (1.8.1): firefox (2.0) - Ubuntu 6.10 - 8.04 LTS
   xulrunner-1.9: firefox-3.0
   xulrunner-1.9.1: firefox-3.5
 jdstrand> Ubuntu 6.06 LTS and 10.04 LTS uses the embedded xulrunner and not
  the system xulrunner-1.9.2, so it is tracked in the firefox source package.
 jdstrand> ignoring until upstream fixes this since a malicious website can
  achieve the same 'exploit' via other means
Bugs:
Priority: negligible
Discovered-by:
Assigned-to:
CVSS: 

Patches_firefox:
upstream_firefox: needs-triage
dapper_firefox: ignored (reached end-of-life)
hardy_firefox: ignored (uses system xulrunner)
jaunty_firefox: DNE
karmic_firefox: DNE
lucid_firefox: ignored
devel_firefox: ignored


Patches_xulrunner:
upstream_xulrunner: needs-triage
dapper_xulrunner: DNE
hardy_xulrunner: ignored
jaunty_xulrunner: ignored
karmic_xulrunner: ignored
lucid_xulrunner: DNE
devel_xulrunner: DNE

Patches_xulrunner-1.9:
upstream_xulrunner-1.9: needs-triage
dapper_xulrunner-1.9: DNE
hardy_xulrunner-1.9: ignored
jaunty_xulrunner-1.9: ignored
karmic_xulrunner-1.9: DNE
lucid_xulrunner-1.9: DNE
devel_xulrunner-1.9: DNE

Patches_xulrunner-1.9.1:
upstream_xulrunner-1.9.1: needs-triage
dapper_xulrunner-1.9.1: DNE
hardy_xulrunner-1.9.1: DNE
jaunty_xulrunner-1.9.1: ignored
karmic_xulrunner-1.9.1: ignored
lucid_xulrunner-1.9.1: DNE
devel_xulrunner-1.9.1: DNE

Patches_xulrunner-1.9.2:
upstream_xulrunner-1.9.2: needs-triage
dapper_xulrunner-1.9.2: DNE
hardy_xulrunner-1.9.2: ignored
jaunty_xulrunner-1.9.2: needs-triage
karmic_xulrunner-1.9.2: needs-triage
lucid_xulrunner-1.9.2: ignored
devel_xulrunner-1.9.2: ignored