PT-2009-3386 · Mozilla+1 · Thunderbird+3
Published
2009-03-05
·
Updated
2024-12-12
·
CVE-2009-0775
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 3.0.7
Thunderbird versions prior to 2.0.0.21
SeaMonkey versions prior to 1.1.15
Description
A double free issue allows remote attackers to execute arbitrary code via cloned XUL DOM elements that are linked as a parent and child, which are not properly handled during garbage collection.
Recommendations
For Mozilla Firefox versions prior to 3.0.7, update to version 3.0.7 or later.
For Thunderbird versions prior to 2.0.0.21, update to version 2.0.0.21 or later.
For SeaMonkey versions prior to 1.1.15, update to version 1.1.15 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox
Red Hat
Seamonkey
Thunderbird