CVE-2010-0220

no score yetEPSS 1.5%

mozilla firefox: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2010-01-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

http://hg.mozilla.org/mozilla-central/rev/51396f6c9f20
http://isc.sans.org/diary.html?storyid=7897
http://www.mandriva.com/security/advisories?name=MDVSA-2010:000
http://www.mozilla.com/en-US/firefox/3.5.7/releasenotes/
https://bugzilla.mozilla.org/show_bug.cgi?id=507114

Check your stack JSON