NVD

Id
49722  
Name
CVE-2009-2477  
Description
js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-15  
Modified Date
2009-09-04  
Seq
2009-2477  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251437 49722 CVE-2009-2477 http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/  View
251438 49722 CVE-2009-2477 http://isc.sans.org/diary.html?storyid=6796  View
251439 49722 CVE-2009-2477 266148  View
251440 49722 CVE-2009-2477 http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html  View
251441 49722 CVE-2009-2477 http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761  View
251442 49722 CVE-2009-2477 VU#443060  View
251443 49722 CVE-2009-2477 9137  View
251444 49722 CVE-2009-2477 9181  View
251445 49722 CVE-2009-2477 http://www.mozilla.org/security/announce/2009/mfsa2009-41.html  View
251446 49722 CVE-2009-2477 35660  View
251447 49722 CVE-2009-2477 ADV-2009-1868  View
251448 49722 CVE-2009-2477 https://bugzilla.mozilla.org/show_bug.cgi?id=503286  View
251449 49722 CVE-2009-2477 FEDORA-2009-7898  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40915 JVNDB-2009-001921 Mozilla Firefox 3.5 に任意のコードが実行される脆弱性 Mozilla Firefox の javascript エンジンには任意のコードが実行される脆弱性が存在します。 CVE-2009-2477 39908 CVE-2009-2477 49722 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001921.html 2009-07-15 2009-08-24 View