CVE-2009-1302

Description

The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.

References

http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 (MDVSA-2009:111) vendor-advisory

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html (FEDORA-2009-3875) vendor-advisory

http://secunia.com/advisories/34894 (34894) third-party-advisory

http://www.vupen.com/english/advisories/2009/1125 (ADV-2009-1125) vdb-entry

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 (SSA:2009-178-01) vendor-advisory

http://www.debian.org/security/2009/dsa-1830 (DSA-1830) vendor-advisory

http://secunia.com/advisories/34758 (34758) third-party-advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=461053

http://secunia.com/advisories/35602 (35602) third-party-advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5527 (oval:org.mitre.oval:def:5527) vdb-entry signature

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070 (oval:org.mitre.oval:def:6070) vdb-entry signature

https://bugzilla.mozilla.org/show_bug.cgi?id=454276

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106 (oval:org.mitre.oval:def:10106) vdb-entry signature

https://bugzilla.mozilla.org/show_bug.cgi?id=483444

https://bugzilla.mozilla.org/show_bug.cgi?id=432114

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170 (oval:org.mitre.oval:def:6170) vdb-entry signature

http://secunia.com/advisories/35065 (35065) third-party-advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=477775

https://bugzilla.mozilla.org/show_bug.cgi?id=431260

https://usn.ubuntu.com/764-1/ (USN-764-1) vendor-advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 (MDVSA-2009:141) vendor-advisory

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html (SUSE-SR:2009:010) vendor-advisory

http://secunia.com/advisories/35042 (35042) third-party-advisory

http://www.securityfocus.com/bid/34656 (34656) vdb-entry

https://bugzilla.mozilla.org/show_bug.cgi?id=467881

https://bugzilla.mozilla.org/show_bug.cgi?id=462517

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030 (oval:org.mitre.oval:def:7030) vdb-entry signature

http://secunia.com/advisories/34843 (34843) third-party-advisory

http://www.debian.org/security/2009/dsa-1797 (DSA-1797) vendor-advisory

http://www.redhat.com/support/errata/RHSA-2009-0436.html (RHSA-2009:0436) vendor-advisory

http://secunia.com/advisories/34780 (34780) third-party-advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 (264308) vendor-advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=428113

http://www.mozilla.org/security/announce/2009/mfsa2009-14.html

http://www.securitytracker.com/id?1022090 (1022090) vdb-entry

cve.org CVE-2009-1302

nvd.nist.gov CVE-2009-1302

Download JSON