CVE-2010-0166

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-03-25 · updated 2026-06-16
Weakness: CWE-119

Description

The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.

Affected products

Mozilla Firefox: 3.6

References

http://www.mozilla.org/security/announce/2010/mfsa2010-11.html
http://www.securityfocus.com/bid/38918
http://www.securityfocus.com/bid/38943
http://www.vupen.com/english/advisories/2010/0692
https://bugzilla.mozilla.org/show_bug.cgi?id=538065
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182
http://www.mozilla.org/security/announce/2010/mfsa2010-11.html
http://www.securityfocus.com/bid/38918
http://www.securityfocus.com/bid/38943
http://www.vupen.com/english/advisories/2010/0692
https://bugzilla.mozilla.org/show_bug.cgi?id=538065
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182

Get alerted when CVE-2010-0166 or the next vulnerability affects your stack