PT-2009-6657 · Mozilla+2 · Libmozjs1D-Dbg+6

Ladamski

+2

·

Publicado

1970-01-01

·

Atualizado

2024-03-12

·

CVE-2009-2469

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.12
Description The issue allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation. Multiple vulnerabilities in the libmozjs1d, libmozjs1d-dbg, libmozjs-dev, and libmozillainterfaces-java packages of the Debian GNU/Linux operating system can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations For Mozilla Firefox versions prior to 3.0.12, update to version 3.0.12 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the libmozjs1d, libmozjs1d-dbg, libmozjs-dev, and libmozillainterfaces-java packages.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2015-01736
BDU:2015-01737
BDU:2015-01738
BDU:2015-01739
CVE-2009-2469
DSA-1840-1
RHSA-2009:1162
RHSA-2009_1162
ROSA-SA-2024-2370

Produtos afetados

Debian
Firefox
Red Hat
Libmozillainterfaces-Java
Libmozjs-Dev
Libmozjs1D
Libmozjs1D-Dbg