NVD

Id
48354  
Name
CVE-2009-1044  
Description
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-23  
Modified Date
2010-08-21  
Seq
2009-1044  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243133 48354 CVE-2009-1044 http://blogs.zdnet.com/security/?p=2934  View
243134 48354 CVE-2009-1044 http://blogs.zdnet.com/security/?p=2941  View
243135 48354 CVE-2009-1044 http://cansecwest.com/index.html  View
243136 48354 CVE-2009-1044 http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009  View
243137 48354 CVE-2009-1044 http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits  View
243138 48354 CVE-2009-1044 SUSE-SA:2009:022  View
243139 48354 CVE-2009-1044 http://news.cnet.com/8301-1009_3-10199652-83.html  View
243140 48354 CVE-2009-1044 oval:org.mitre.oval:def:11368  View
243141 48354 CVE-2009-1044 http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm  View
243142 48354 CVE-2009-1044 http://twitter.com/tippingpoint1/status/1351635812  View
243143 48354 CVE-2009-1044 DSA-1756  View
243144 48354 CVE-2009-1044 http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889  View
243145 48354 CVE-2009-1044 MDVSA-2009:084  View
243146 48354 CVE-2009-1044 http://www.mozilla.org/security/announce/2009/mfsa2009-13.html  View
243147 48354 CVE-2009-1044 RHSA-2009:0397  View
243148 48354 CVE-2009-1044 RHSA-2009:0398  View
243149 48354 CVE-2009-1044 20090330 ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability  View
243150 48354 CVE-2009-1044 34181  View
243151 48354 CVE-2009-1044 1021878  View
243152 48354 CVE-2009-1044 USN-745-1  View
243153 48354 CVE-2009-1044 ADV-2009-0864  View
243154 48354 CVE-2009-1044 http://www.zerodayinitiative.com/advisories/ZDI-09-015  View
243155 48354 CVE-2009-1044 https://bugzilla.mozilla.org/show_bug.cgi?id=484320  View
243156 48354 CVE-2009-1044 FEDORA-2009-3099  View
243157 48354 CVE-2009-1044 FEDORA-2009-3100  View
243158 48354 CVE-2009-1044 FEDORA-2009-3101  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40496 JVNDB-2009-001502 Windows 7 上で稼動する Mozilla Firefox における任意のコードを実行される脆弱性 Windows 7 上で稼動する Mozilla Firefox には、任意のコードを実行される脆弱性が存在します。 CVE-2009-1044 38475 CVE-2009-1044 48354 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001502.html 2009-03-23 2009-06-30 View