PT-2009-3015 · Mozilla+1 · Firefox+3

Martijn Wargers · Published 2009-02-04 · Updated 2024-12-12 · CVE-2009-0352

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.x before 3.0.6 Thunderbird versions before 2.0.0.21 SeaMonkey versions before 1.1.15

Description The issue is related to multiple unspecified vulnerabilities in the layout engine, specifically with the destruction of arbitrary layout objects by the nsViewManager::Composite function. This can cause a denial of service due to memory corruption and application crash, or potentially allow the execution of arbitrary code.

Recommendations For Mozilla Firefox versions 3.x before 3.0.6, update to version 3.0.6 or later. For Thunderbird versions before 2.0.0.21, update to version 2.0.0.21 or later. For SeaMonkey versions before 1.1.15, update to version 1.1.15 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-0352

DSA-1830-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:0256

RHSA-2009:0257

RHSA-2009:0258

RHSA-2009_0256

RHSA-2009_0257

RHSA-2009_0258

Affected Products

Firefox

Red Hat

Seamonkey

Thunderbird

References · 1926

• https://redhat.com/archives/fedora-package-announce/2009-March/msg00771.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0257.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:044 · Vendor Advisory
• http://debian.org/security/2009/dsa-1830 · Vendor Advisory
• http://ubuntu.com/usn/usn-717-1 · Vendor Advisory
• http://mozilla.org/security/announce/2009/mfsa2009-01.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00769.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0258.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0352 · Security Note
• https://usn.ubuntu.com/741-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:083 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 · Vendor Advisory