CVE

Id
39912  
CVE No.
CVE-2009-2477  
Status
Candidate  
Description
js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.  
Phase
Assigned (20090715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438652 39912 CVE-2009-2477 MILW0RM:9137  View
438653 39912 CVE-2009-2477 URL:http://www.milw0rm.com/exploits/9137  View
438654 39912 CVE-2009-2477 MILW0RM:9181  View
438655 39912 CVE-2009-2477 URL:http://www.milw0rm.com/exploits/9181  View
438656 39912 CVE-2009-2477 MISC:http://isc.sans.org/diary.html?storyid=6796  View
438657 39912 CVE-2009-2477 MISC:http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761  View
438658 39912 CVE-2009-2477 MISC:http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html  View
438659 39912 CVE-2009-2477 CONFIRM:http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/  View
438660 39912 CVE-2009-2477 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=503286  View
438661 39912 CVE-2009-2477 CONFIRM:http://www.mozilla.org/security/announce/2009/mfsa2009-41.html  View
438662 39912 CVE-2009-2477 FEDORA:FEDORA-2009-7898  View
438663 39912 CVE-2009-2477 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html  View
438664 39912 CVE-2009-2477 SUNALERT:266148  View
438665 39912 CVE-2009-2477 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1  View
438666 39912 CVE-2009-2477 CERT-VN:VU#443060  View
438667 39912 CVE-2009-2477 URL:http://www.kb.cert.org/vuls/id/443060  View
438668 39912 CVE-2009-2477 BID:35660  View
438669 39912 CVE-2009-2477 URL:http://www.securityfocus.com/bid/35660  View
438670 39912 CVE-2009-2477 SECUNIA:35798  View
438671 39912 CVE-2009-2477 URL:http://secunia.com/advisories/35798  View
438672 39912 CVE-2009-2477 VUPEN:ADV-2009-1868  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39958 JVNDB-2009-000043 Movable Type におけるアクセス制限回避の脆弱性 Movable Type には、アクセス制限回避が可能な脆弱性が存在します。 CVE-2009-2481 39912 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000043.html  View