PT-2009-3016 · Mozilla+1 · Firefox+3

Gary Kwong + 1 · Publicado 2009-02-04 · Atualizado 2017-09-29 · CVE-2009-0353

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.x before 3.0.6 Thunderbird versions before 2.0.0.21 SeaMonkey versions before 1.1.15

Description The issue is related to an unspecified vulnerability in the JavaScript engine, allowing remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code.

Recommendations For Mozilla Firefox versions 3.x before 3.0.6, update to version 3.0.6 or later. For Thunderbird versions before 2.0.0.21, update to version 2.0.0.21 or later. For SeaMonkey versions before 1.1.15, update to version 1.1.15 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-0353

DSA-1830-1

RHSA-2009:0256

RHSA-2009:0257

RHSA-2009:0258

RHSA-2009_0256

RHSA-2009_0257

RHSA-2009_0258

Produtos afetados

Firefox

Red Hat

Seamonkey

Thunderbird

Referências · 51

• https://access.redhat.com/security/cve/CVE-2009-0355 · Nota
• http://secunia.com/advisories/33802 · Nota
• http://secunia.com/advisories/33799 · Nota
• https://access.redhat.com/security/cve/CVE-2009-0772 · Nota
• https://redhat.com/archives/fedora-package-announce/2009-February/msg00240.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0353 · Nota de Segurança
• http://ubuntu.com/usn/usn-717-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2009-0356 · Nota
• http://vupen.com/english/advisories/2009/0313 · Nota
• http://secunia.com/advisories/33809 · Nota
• https://access.redhat.com/security/cve/CVE-2009-0776 · Nota
• https://access.redhat.com/errata/RHSA-2009:0258 · Nota
• http://secunia.com/advisories/33841 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html · Aviso do Fabricante
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 · Aviso do Fabricante