CVE

Id
39906  
CVE No.
CVE-2009-2471  
Status
Candidate  
Description
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.  
Phase
Assigned (20090715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438484 39906 CVE-2009-2471 CONFIRM:http://www.mozilla.org/security/announce/2009/mfsa2009-39.html  View
438485 39906 CVE-2009-2471 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=460882  View
438486 39906 CVE-2009-2471 FEDORA:FEDORA-2009-7961  View
438487 39906 CVE-2009-2471 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html  View
438488 39906 CVE-2009-2471 REDHAT:RHSA-2009:1162  View
438489 39906 CVE-2009-2471 URL:http://rhn.redhat.com/errata/RHSA-2009-1162.html  View
438490 39906 CVE-2009-2471 SUSE:SUSE-SA:2009:042  View
438491 39906 CVE-2009-2471 URL:http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html  View
438492 39906 CVE-2009-2471 SUSE:SUSE-SA:2009:039  View
438493 39906 CVE-2009-2471 URL:http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html  View
438494 39906 CVE-2009-2471 BID:35758  View
438495 39906 CVE-2009-2471 URL:http://www.securityfocus.com/bid/35758  View
438496 39906 CVE-2009-2471 OVAL:oval:org.mitre.oval:def:10572  View
438497 39906 CVE-2009-2471 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10572  View
438498 39906 CVE-2009-2471 SECUNIA:35914  View
438499 39906 CVE-2009-2471 URL:http://secunia.com/advisories/35914  View
438500 39906 CVE-2009-2471 SECUNIA:35944  View
438501 39906 CVE-2009-2471 URL:http://secunia.com/advisories/35944  View
438502 39906 CVE-2009-2471 SECUNIA:36145  View
438503 39906 CVE-2009-2471 URL:http://secunia.com/advisories/36145  View
438504 39906 CVE-2009-2471 SECUNIA:36005  View
438505 39906 CVE-2009-2471 URL:http://secunia.com/advisories/36005  View
438506 39906 CVE-2009-2471 VUPEN:ADV-2009-1972  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41001 JVNDB-2009-002007 Sun Java SE および OpenJDK における重要な情報を取得される脆弱性 Sun Java SE および OpenJDK には、final キーワードなしに宣言された静的な変数の処理に不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2009-2475 39906 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002007.html  View