NVD

Id
49707  
Name
CVE-2009-2462  
Description
The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-22  
Modified Date
2010-08-21  
Seq
2009-2462  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251228 49707 CVE-2009-2462 SUSE-SA:2009:039  View
251229 49707 CVE-2009-2462 SUSE-SA:2009:042  View
251230 49707 CVE-2009-2462 oval:org.mitre.oval:def:10906  View
251231 49707 CVE-2009-2462 RHSA-2009:1162  View
251232 49707 CVE-2009-2462 RHSA-2009:1163  View
251233 49707 CVE-2009-2462 265068  View
251234 49707 CVE-2009-2462 1020800  View
251235 49707 CVE-2009-2462 http://www.mozilla.org/security/announce/2009/mfsa2009-34.html  View
251236 49707 CVE-2009-2462 RHSA-2010:0153  View
251237 49707 CVE-2009-2462 RHSA-2010:0154  View
251238 49707 CVE-2009-2462 35758  View
251239 49707 CVE-2009-2462 ADV-2009-1972  View
251240 49707 CVE-2009-2462 ADV-2009-2152  View
251241 49707 CVE-2009-2462 ADV-2010-0650  View
251242 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=413085  View
251243 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=442227  View
251244 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=445177  View
251245 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=461861  View
251246 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=463350  View
251247 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=466763  View
251248 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=468211  View
251249 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=472668  View
251250 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=472950  View
251251 49707 CVE-2009-2462 https://bugzilla.mozilla.org/show_bug.cgi?id=491134  View
251252 49707 CVE-2009-2462 FEDORA-2009-7961  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40926 JVNDB-2009-001932 Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性 Mozilla Firefox/Thunderbird のブラウザエンジンには、下記に関連するサービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-2462 39893 CVE-2009-2462 49707 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001932.html 2009-07-21 2010-04-01 View