PT-2009-6657 · Mozilla+2 · Libmozjs1D-Dbg+6

Ladamski

+2

·

Published

1970-01-01

·

Updated

2024-03-12

·

CVE-2009-2469

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.12
Description The issue allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation. Multiple vulnerabilities in the libmozjs1d, libmozjs1d-dbg, libmozjs-dev, and libmozillainterfaces-java packages of the Debian GNU/Linux operating system can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations For Mozilla Firefox versions prior to 3.0.12, update to version 3.0.12 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the libmozjs1d, libmozjs1d-dbg, libmozjs-dev, and libmozillainterfaces-java packages.

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2015-01736
BDU:2015-01737
BDU:2015-01738
BDU:2015-01739
CVE-2009-2469
DSA-1840-1
RHSA-2009:1162
RHSA-2009_1162
ROSA-SA-2024-2370

Affected Products

Debian
Firefox
Red Hat
Libmozillainterfaces-Java
Libmozjs-Dev
Libmozjs1D
Libmozjs1D-Dbg