NVD

Id
49103  
Name
CVE-2009-1837  
Description
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-12  
Modified Date
2010-08-21  
Seq
2009-1837  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248355 49103 CVE-2009-1837 oval:org.mitre.oval:def:10628  View
248356 49103 CVE-2009-1837 SSA:2009-167-01  View
248357 49103 CVE-2009-1837 264308  View
248358 49103 CVE-2009-1837 DSA-1820  View
248359 49103 CVE-2009-1837 http://www.mozilla.org/security/announce/2009/mfsa2009-28.html  View
248360 49103 CVE-2009-1837 20090612 Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability  View
248361 49103 CVE-2009-1837 35326  View
248362 49103 CVE-2009-1837 35360  View
248363 49103 CVE-2009-1837 1022386  View
248364 49103 CVE-2009-1837 ADV-2009-1572  View
248365 49103 CVE-2009-1837 https://bugzilla.mozilla.org/show_bug.cgi?id=486269  View
248366 49103 CVE-2009-1837 https://bugzilla.redhat.com/show_bug.cgi?id=503579  View
248367 49103 CVE-2009-1837 RHSA-2009:1095  View
248368 49103 CVE-2009-1837 FEDORA-2009-6366  View
248369 49103 CVE-2009-1837 FEDORA-2009-6411  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40817 JVNDB-2009-001823 Mozilla Firefox の NPObjWrapper_NewResolve 関数における任意のコードを実行される脆弱性 Mozilla Firefox の xul.dll にある NPObjWrapper_NewResolve 関数には、Java アプレットロード中のページ移動処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-1837 39268 CVE-2009-1837 49103 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001823.html 2009-06-11 2009-07-29 View