CVE - CVE-2009-2462

CVE-ID
CVE-2009-2462	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1020800 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1~~ (Obsolete source) MISC:265068 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1~~ (Obsolete source) MISC:35758 URL:http://www.securityfocus.com/bid/35758 MISC:35914 URL:http://secunia.com/advisories/35914 MISC:35943 URL:http://secunia.com/advisories/35943 MISC:35944 URL:http://secunia.com/advisories/35944 MISC:35947 URL:http://secunia.com/advisories/35947 MISC:36005 URL:http://secunia.com/advisories/36005 MISC:36145 URL:http://secunia.com/advisories/36145 MISC:ADV-2009-1972 URL:~~http://www.vupen.com/english/advisories/2009/1972~~ (Obsolete source) MISC:ADV-2009-2152 URL:~~http://www.vupen.com/english/advisories/2009/2152~~ (Obsolete source) MISC:ADV-2010-0650 URL:~~http://www.vupen.com/english/advisories/2010/0650~~ (Obsolete source) MISC:FEDORA-2009-7961 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html MISC:RHSA-2009:1162 URL:http://rhn.redhat.com/errata/RHSA-2009-1162.html MISC:RHSA-2009:1163 URL:http://rhn.redhat.com/errata/RHSA-2009-1163.html MISC:RHSA-2010:0153 URL:http://www.redhat.com/support/errata/RHSA-2010-0153.html MISC:RHSA-2010:0154 URL:http://www.redhat.com/support/errata/RHSA-2010-0154.html MISC:SUSE-SA:2009:039 URL:http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html MISC:SUSE-SA:2009:042 URL:http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html MISC:http://www.mozilla.org/security/announce/2009/mfsa2009-34.html URL:http://www.mozilla.org/security/announce/2009/mfsa2009-34.html MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=413085 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=413085 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=442227 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=442227 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=445177 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=445177 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=461861 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=461861 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=463350 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=463350 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=466763 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=466763 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=468211 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=468211 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=472668 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=472668 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=472950 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=472950 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=491134 URL:https://bugzilla.mozilla.org/show_bug.cgi?id=491134 MISC:oval:org.mitre.oval:def:10906 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906
Assigning CNA
Red Hat, Inc.
Date Record Created
20090715	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090715)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)