CVE - CVE-2009-0773

CVE-ID
CVE-2009-0773	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1021795 URL:http://www.securitytracker.com/id?1021795 MISC:33990 URL:http://www.securityfocus.com/bid/33990 MISC:34140 URL:http://secunia.com/advisories/34140 MISC:34145 URL:http://secunia.com/advisories/34145 MISC:34272 URL:http://secunia.com/advisories/34272 MISC:34383 URL:http://secunia.com/advisories/34383 MISC:34462 URL:http://secunia.com/advisories/34462 MISC:34464 URL:http://secunia.com/advisories/34464 MISC:34527 URL:http://secunia.com/advisories/34527 MISC:ADV-2009-0632 URL:~~http://www.vupen.com/english/advisories/2009/0632~~ (Obsolete source) MISC:DSA-1751 URL:http://www.debian.org/security/2009/dsa-1751 MISC:DSA-1830 URL:http://www.debian.org/security/2009/dsa-1830 MISC:FEDORA-2009-3101 URL:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html MISC:MDVSA-2009:075 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2009:075~~ (Obsolete source) MISC:MDVSA-2009:083 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2009:083~~ (Obsolete source) MISC:RHSA-2009:0315 URL:http://www.redhat.com/support/errata/RHSA-2009-0315.html MISC:SSA:2009-083-02 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 MISC:SSA:2009-083-03 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 MISC:SUSE-SA:2009:012 URL:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html MISC:http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm MISC:http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document URL:http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document MISC:http://www.mozilla.org/security/announce/2009/mfsa2009-07.html URL:http://www.mozilla.org/security/announce/2009/mfsa2009-07.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=457521 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=457521 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=467499 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=467499 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=472787 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=472787 MISC:oval:org.mitre.oval:def:10491 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491 MISC:oval:org.mitre.oval:def:5856 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856 MISC:oval:org.mitre.oval:def:5980 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980 MISC:oval:org.mitre.oval:def:6141 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141 MISC:oval:org.mitre.oval:def:6708 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708
Assigning CNA
Red Hat, Inc.
Date Record Created
20090303	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090303)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)