CVE

Id
39914  
CVE No.
CVE-2009-2479  
Status
Candidate  
Description
Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application crash) via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, a crash resulting from this long string reportedly occurs in an operating-system library, not in Firefox.  
Phase
Assigned (20090716)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438676 39914 CVE-2009-2479 BUGTRAQ:20090719 DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome  View
438677 39914 CVE-2009-2479 URL:http://www.securityfocus.com/archive/1/archive/1/505092/100/0/threaded  View
438678 39914 CVE-2009-2479 MILW0RM:9158  View
438679 39914 CVE-2009-2479 URL:http://www.milw0rm.com/exploits/9158  View
438680 39914 CVE-2009-2479 MISC:http://websecurity.com.ua/3338/  View
438681 39914 CVE-2009-2479 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=504343  View
438682 39914 CVE-2009-2479 CONFIRM:http://blog.mozilla.com/security/2009/07/19/milw0rm-9158-stack-overflow-crash-not-exploitable-cve-2009-2479/  View
438683 39914 CVE-2009-2479 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=504342  View
438684 39914 CVE-2009-2479 FEDORA:FEDORA-2009-7898  View
438685 39914 CVE-2009-2479 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html  View
438686 39914 CVE-2009-2479 BID:35707  View
438687 39914 CVE-2009-2479 URL:http://www.securityfocus.com/bid/35707  View
438688 39914 CVE-2009-2479 OSVDB:55931  View
438689 39914 CVE-2009-2479 URL:http://osvdb.org/55931  View
438690 39914 CVE-2009-2479 SECTRACK:1022580  View
438691 39914 CVE-2009-2479 URL:http://www.securitytracker.com/id?1022580  View
438692 39914 CVE-2009-2479 XF:firefox-unicode-data-dos(51729)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43817 JVNDB-2009-004824 NetBSD の proplib におけるサービス運用妨害 (DoS) の脆弱性 NetBSD の proplib の libprop/prop_object.c には、サービス運用妨害 (NULL ポインタデリファレンスおよびカーネルパニック) 状態となる脆弱性が存在します。 CVE-2009-2483 39914 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004824.html  View