CVE-2010-0181: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.

Affected products

• Mozilla Firefox: version 3.6 only; up to and including 3.5.7; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; …
• Mozilla Seamonkey: up to and including 2.0.3; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …

Published 2010-04-05. Last modified 2026-06-16.