PT-2009-3386 · Mozilla+1 · Thunderbird+3

Publicado 2009-03-05 · Atualizado 2024-12-12 · CVE-2009-0775

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.7 Thunderbird versions prior to 2.0.0.21 SeaMonkey versions prior to 1.1.15

Description A double free issue allows remote attackers to execute arbitrary code via cloned XUL DOM elements that are linked as a parent and child, which are not properly handled during garbage collection.

Recommendations For Mozilla Firefox versions prior to 3.0.7, update to version 3.0.7 or later. For Thunderbird versions prior to 2.0.0.21, update to version 2.0.0.21 or later. For SeaMonkey versions prior to 1.1.15, update to version 1.1.15 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-0775

DSA-1751-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:0258

RHSA-2009:0315

RHSA-2009:0325

RHSA-2009_0258

RHSA-2009_0315

RHSA-2009_0325

Produtos afetados

Firefox

Red Hat

Seamonkey

Thunderbird

Referências · 2114

• https://suse.com/security/cve/CVE-2023-6856 · Nota
• https://suse.com/security/cve/CVE-2024-4778 · Nota
• https://suse.com/security/cve/CVE-2019-11751 · Nota
• https://suse.com/security/cve/CVE-2017-5441 · Nota
• https://suse.com/security/cve/CVE-2023-6861 · Nota
• https://suse.com/security/cve/CVE-2015-0817 · Nota
• https://suse.com/security/cve/CVE-2021-23965 · Nota
• https://suse.com/security/cve/CVE-2016-9899 · Nota
• https://suse.com/security/cve/CVE-2014-1562 · Nota
• https://suse.com/security/cve/CVE-2015-7176 · Nota
• https://suse.com/security/cve/CVE-2023-32206 · Nota
• https://suse.com/security/cve/CVE-2017-5406 · Nota
• https://suse.com/security/cve/CVE-2016-5272 · Nota
• https://suse.com/security/cve/CVE-2012-3961 · Nota
• https://suse.com/security/cve/CVE-2017-7836 · Nota