NVD

Id
48677  
Name
CVE-2009-1392  
Description
The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-12  
Modified Date
2010-08-21  
Seq
2009-1392  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245895 48677 CVE-2009-1392 oval:org.mitre.oval:def:9501  View
245896 48677 CVE-2009-1392 RHSA-2009:1096  View
245897 48677 CVE-2009-1392 1022376  View
245898 48677 CVE-2009-1392 SSA:2009-167-01  View
245899 48677 CVE-2009-1392 SSA:2009-176-01  View
245900 48677 CVE-2009-1392 265068  View
245901 48677 CVE-2009-1392 1020800  View
245902 48677 CVE-2009-1392 DSA-1820  View
245903 48677 CVE-2009-1392 DSA-1830  View
245904 48677 CVE-2009-1392 MDVSA-2009:141  View
245905 48677 CVE-2009-1392 http://www.mozilla.org/security/announce/2009/mfsa2009-24.html  View
245906 48677 CVE-2009-1392 RHSA-2009:1125  View
245907 48677 CVE-2009-1392 RHSA-2009:1126  View
245908 48677 CVE-2009-1392 35326  View
245909 48677 CVE-2009-1392 35370  View
245910 48677 CVE-2009-1392 1022397  View
245911 48677 CVE-2009-1392 SSA:2009-178-01  View
245912 48677 CVE-2009-1392 USN-782-1  View
245913 48677 CVE-2009-1392 ADV-2009-1572  View
245914 48677 CVE-2009-1392 ADV-2009-2152  View
245915 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=380359  View
245916 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=429969  View
245917 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=431086  View
245918 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=432068  View
245919 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=451341  View
245920 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=472776  View
245921 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=486398  View
245922 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=489041  View
245923 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=490410  View
245924 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=490425  View
245925 48677 CVE-2009-1392 https://bugzilla.mozilla.org/show_bug.cgi?id=490513  View
245926 48677 CVE-2009-1392 https://bugzilla.redhat.com/show_bug.cgi?id=503568  View
245927 48677 CVE-2009-1392 RHSA-2009:1095  View
245928 48677 CVE-2009-1392 FEDORA-2009-6366  View
245929 48677 CVE-2009-1392 FEDORA-2009-6411  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40814 JVNDB-2009-001820 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 複数の Mozilla 製品のブラウザエンジンには、下記に関連するサービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-1392 38823 CVE-2009-1392 48677 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001820.html 2009-06-11 2009-07-29 View