CVE:CVE-2010-0220
CNNVD:CNNVD-201001-039
Mozilla Firefox 3.5.7之前版本的xpcom/ds/nsObserverList.cpp中的nsObserverList::FillObserverArray函数允许远程攻击者借助一个特制的网站，引起拒绝服务攻击(应用程序崩溃)。该站点会触发内存损耗和低内存警告对话，还会试图从空的观察者数组中移除一个观察者。
solution:Upgrade mozilla firefox to a higher version than 3.5.6,0.1,0.2,0.3,0.4,0.5,0.6,0.6.1,0.7,0.7.1,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0:preview_release,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.4.1,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,3.0,3.0.5,3.5,3.5.2,3.5.3,3.5.4,3.5.5,and avoid the version (,3.5.6],0.1,0.2,0.3,0.4,0.5,0.6,0.6.1,0.7,0.7.1,0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,1.0,1.0:preview_release,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.4.1,1.5,1.5:beta1,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.5.7,1.5.8,1.8,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,3.0,3.0.5,3.5,3.5.2,3.5.3,3.5.4,3.5.5
solution:Upgrade pulsecms pulse_cms to a higher version than 1.2.2,1.0,1.1,1.01,1.2,1.2.1,1.15,1.16,1.17,1.18,and avoid the version (,1.2.2],1.0,1.1,1.01,1.2,1.2.1,1.15,1.16,1.17,1.18