CVE

Id
38667  
CVE No.
CVE-2009-1232  
Status
Candidate  
Description
Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected.  
Phase
Assigned (20090402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423380 38667 CVE-2009-1232 MILW0RM:8306  View
423381 38667 CVE-2009-1232 URL:http://www.milw0rm.com/exploits/8306  View
423382 38667 CVE-2009-1232 MISC:http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar  View
423383 38667 CVE-2009-1232 MISC:http://websecurity.com.ua/3216/  View
423384 38667 CVE-2009-1232 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=485941  View
423385 38667 CVE-2009-1232 BID:34522  View
423386 38667 CVE-2009-1232 URL:http://www.securityfocus.com/bid/34522  View
423387 38667 CVE-2009-1232 XF:firefox-xml-dos(49521)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40521 JVNDB-2009-001527 Apple Mac OS X の XNU に含まれる AppleTalk のネットワークスタックにおけるヒープオーバーフローの脆弱性 Apple Mac OS X の XNU に含まれる AppleTalk のネットワークスタックには、ヒープオーバーフローの脆弱性が存在します。 CVE-2009-1236 38667 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001527.html  View