PT-2009-3016 · Mozilla+1 · Firefox+3

Gary Kwong + 1 · Published 2009-02-04 · Updated 2017-09-29 · CVE-2009-0353

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.x before 3.0.6 Thunderbird versions before 2.0.0.21 SeaMonkey versions before 1.1.15

Description The issue is related to an unspecified vulnerability in the JavaScript engine, allowing remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code.

Recommendations For Mozilla Firefox versions 3.x before 3.0.6, update to version 3.0.6 or later. For Thunderbird versions before 2.0.0.21, update to version 2.0.0.21 or later. For SeaMonkey versions before 1.1.15, update to version 1.1.15 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-0353

DSA-1830-1

RHSA-2009:0256

RHSA-2009:0257

RHSA-2009:0258

RHSA-2009_0256

RHSA-2009_0257

RHSA-2009_0258

Affected Products

Firefox

Red Hat

Seamonkey

Thunderbird

References · 51

• https://redhat.com/archives/fedora-package-announce/2009-February/msg00240.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0353 · Security Note
• http://ubuntu.com/usn/usn-717-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00771.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg01077.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0257.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0258.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:083 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00769.html · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:044 · Vendor Advisory
• http://mozilla.org/security/announce/2009/mfsa2009-01.html · Vendor Advisory