NVD

Id
48092  
Name
CVE-2009-0773  
Description
The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-04  
Modified Date
2010-08-21  
Seq
2009-0773  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241291 48092 CVE-2009-0773 SUSE-SA:2009:012  View
241292 48092 CVE-2009-0773 oval:org.mitre.oval:def:10491  View
241293 48092 CVE-2009-0773 oval:org.mitre.oval:def:5856  View
241294 48092 CVE-2009-0773 oval:org.mitre.oval:def:5980  View
241295 48092 CVE-2009-0773 oval:org.mitre.oval:def:6141  View
241296 48092 CVE-2009-0773 oval:org.mitre.oval:def:6708  View
241297 48092 CVE-2009-0773 SSA:2009-083-02  View
241298 48092 CVE-2009-0773 SSA:2009-083-03  View
241299 48092 CVE-2009-0773 http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm  View
241300 48092 CVE-2009-0773 http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document  View
241301 48092 CVE-2009-0773 DSA-1751  View
241302 48092 CVE-2009-0773 DSA-1830  View
241303 48092 CVE-2009-0773 MDVSA-2009:075  View
241304 48092 CVE-2009-0773 MDVSA-2009:083  View
241305 48092 CVE-2009-0773 http://www.mozilla.org/security/announce/2009/mfsa2009-07.html  View
241306 48092 CVE-2009-0773 RHSA-2009:0315  View
241307 48092 CVE-2009-0773 33990  View
241308 48092 CVE-2009-0773 1021795  View
241309 48092 CVE-2009-0773 ADV-2009-0632  View
241310 48092 CVE-2009-0773 https://bugzilla.mozilla.org/show_bug.cgi?id=457521  View
241311 48092 CVE-2009-0773 https://bugzilla.mozilla.org/show_bug.cgi?id=467499  View
241312 48092 CVE-2009-0773 https://bugzilla.mozilla.org/show_bug.cgi?id=472787  View
241313 48092 CVE-2009-0773 FEDORA-2009-3101  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40104 JVNDB-2009-001110 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 複数の Mozilla 製品の JavaScript エンジンには、配列の接合処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-0773 38204 CVE-2009-0773 48092 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001110.html 2009-03-04 2009-03-31 View