CVE - CVE-2009-1837

CVE-ID
CVE-2009-1837	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1022386 URL:http://www.securitytracker.com/id?1022386 MISC:20090612 Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability URL:http://www.securityfocus.com/archive/1/504260/100/0/threaded MISC:264308 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1~~ (Obsolete source) MISC:34241 URL:http://secunia.com/advisories/34241 MISC:35326 URL:http://www.securityfocus.com/bid/35326 MISC:35331 URL:http://secunia.com/advisories/35331 MISC:35360 URL:http://www.securityfocus.com/bid/35360 MISC:35415 URL:http://secunia.com/advisories/35415 MISC:35431 URL:http://secunia.com/advisories/35431 MISC:35468 URL:http://secunia.com/advisories/35468 MISC:ADV-2009-1572 URL:~~http://www.vupen.com/english/advisories/2009/1572~~ (Obsolete source) MISC:DSA-1820 URL:http://www.debian.org/security/2009/dsa-1820 MISC:FEDORA-2009-6366 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html MISC:FEDORA-2009-6411 URL:https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html MISC:RHSA-2009:1095 URL:https://rhn.redhat.com/errata/RHSA-2009-1095.html MISC:SSA:2009-167-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 MISC:http://secunia.com/secunia_research/2009-19/ URL:http://secunia.com/secunia_research/2009-19/ MISC:http://www.mozilla.org/security/announce/2009/mfsa2009-28.html URL:http://www.mozilla.org/security/announce/2009/mfsa2009-28.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=486269 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=486269 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=503579 URL:https://bugzilla.redhat.com/show_bug.cgi?id=503579 MISC:oval:org.mitre.oval:def:10628 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10628
Assigning CNA
Red Hat, Inc.
Date Record Created
20090529	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090529)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.