CVE - CVE-2009-1392

CVE-ID
CVE-2009-1392	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://www.mozilla.org/security/announce/2009/mfsa2009-24.html CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=380359 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=429969 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=431086 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=432068 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=451341 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=472776 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=486398 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=489041 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=490410 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=490425 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=490513 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=503568 DEBIAN:DSA-1820 URL:http://www.debian.org/security/2009/dsa-1820 DEBIAN:DSA-1830 URL:http://www.debian.org/security/2009/dsa-1830 FEDORA:FEDORA-2009-6366 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html FEDORA:FEDORA-2009-6411 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html MANDRIVA:MDVSA-2009:141 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 REDHAT:RHSA-2009:1095 URL:https://rhn.redhat.com/errata/RHSA-2009-1095.html REDHAT:RHSA-2009:1096 URL:http://rhn.redhat.com/errata/RHSA-2009-1096.html REDHAT:RHSA-2009:1125 URL:http://www.redhat.com/support/errata/RHSA-2009-1125.html REDHAT:RHSA-2009:1126 URL:http://www.redhat.com/support/errata/RHSA-2009-1126.html SLACKWARE:SSA:2009-167-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 SLACKWARE:SSA:2009-176-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 SLACKWARE:SSA:2009-178-01 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 SUNALERT:265068 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 SUNALERT:1020800 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 UBUNTU:USN-782-1 URL:http://www.ubuntu.com/usn/usn-782-1 BID:35326 URL:http://www.securityfocus.com/bid/35326 BID:35370 URL:http://www.securityfocus.com/bid/35370 OSVDB:55144 URL:http://osvdb.org/55144 OSVDB:55145 URL:http://osvdb.org/55145 OSVDB:55146 URL:http://osvdb.org/55146 OSVDB:55147 URL:http://osvdb.org/55147 OVAL:oval:org.mitre.oval:def:9501 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501 SECTRACK:1022376 URL:http://securitytracker.com/id?1022376 SECTRACK:1022397 URL:http://www.securitytracker.com/id?1022397 SECUNIA:35331 URL:http://secunia.com/advisories/35331 SECUNIA:35428 URL:http://secunia.com/advisories/35428 SECUNIA:35431 URL:http://secunia.com/advisories/35431 SECUNIA:35439 URL:http://secunia.com/advisories/35439 SECUNIA:35440 URL:http://secunia.com/advisories/35440 SECUNIA:35468 URL:http://secunia.com/advisories/35468 SECUNIA:35536 URL:http://secunia.com/advisories/35536 SECUNIA:35415 URL:http://secunia.com/advisories/35415 SECUNIA:35561 URL:http://secunia.com/advisories/35561 SECUNIA:35602 URL:http://secunia.com/advisories/35602 VUPEN:ADV-2009-1572 URL:http://www.vupen.com/english/advisories/2009/1572 VUPEN:ADV-2009-2152 URL:http://www.vupen.com/english/advisories/2009/2152
Assigning CNA
N/A
Date Entry Created
20090423	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090423)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org