CVE-2010-0164

Name	CVE-2010-0164
Description	Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
iceape	source	(unstable)	(not affected)
iceweasel	source	(unstable)	(not affected)
xulrunner	source	(unstable)	(not affected)

Notes

- xulrunner <not-affected> (vulnerable code introduced in firefox 3.6)
- iceape <not-affected> (vulnerable code introduced in firefox 3.6)
- iceweasel <not-affected> (vulnerable code introduced in firefox 3.6)