CVE - CVE-2009-1302

CVE-ID
CVE-2009-1302	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.mozilla.org/security/announce/2009/mfsa2009-14.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=428113 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=431260 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=432114 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=454276 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=461053 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=462517 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=467881 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=477775 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=483444 DEBIAN:DSA-1797 URL:http://www.debian.org/security/2009/dsa-1797 DEBIAN:DSA-1830 URL:http://www.debian.org/security/2009/dsa-1830 FEDORA:FEDORA-2009-3875 URL:https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html MANDRIVA:MDVSA-2009:111 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 MANDRIVA:MDVSA-2009:141 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 REDHAT:RHSA-2009:0436 URL:http://www.redhat.com/support/errata/RHSA-2009-0436.html SLACKWARE:SSA:2009-178-01 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 SUNALERT:264308 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 SUSE:SUSE-SR:2009:010 URL:http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html UBUNTU:USN-764-1 URL:https://usn.ubuntu.com/764-1/ BID:34656 URL:http://www.securityfocus.com/bid/34656 OVAL:oval:org.mitre.oval:def:10106 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106 OVAL:oval:org.mitre.oval:def:5527 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527 OVAL:oval:org.mitre.oval:def:6070 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070 OVAL:oval:org.mitre.oval:def:6170 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170 OVAL:oval:org.mitre.oval:def:7030 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030 SECTRACK:1022090 URL:http://www.securitytracker.com/id?1022090 SECUNIA:34758 URL:http://secunia.com/advisories/34758 SECUNIA:34894 URL:http://secunia.com/advisories/34894 SECUNIA:34843 URL:http://secunia.com/advisories/34843 SECUNIA:34780 URL:http://secunia.com/advisories/34780 SECUNIA:35065 URL:http://secunia.com/advisories/35065 SECUNIA:35042 URL:http://secunia.com/advisories/35042 SECUNIA:35602 URL:http://secunia.com/advisories/35602 VUPEN:ADV-2009-1125 URL:http://www.vupen.com/english/advisories/2009/1125
Assigning CNA
N/A
Date Entry Created
20090416	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.