NVD

Id
50292  
Name
CVE-2009-3077  
Description
Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-10  
Modified Date
2012-10-22  
Seq
2009-3077  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254600 50292 CVE-2009-3077 SUSE-SR:2010:013  View
254601 50292 CVE-2009-3077 oval:org.mitre.oval:def:10730  View
254602 50292 CVE-2009-3077 oval:org.mitre.oval:def:5606  View
254603 50292 CVE-2009-3077 DSA-1885  View
254604 50292 CVE-2009-3077 http://www.mozilla.org/security/announce/2009/mfsa2009-49.html  View
254605 50292 CVE-2009-3077 SUSE-SA:2009:048  View
254606 50292 CVE-2009-3077 RHSA-2009:1430  View
254607 50292 CVE-2009-3077 RHSA-2009:1431  View
254608 50292 CVE-2009-3077 RHSA-2009:1432  View
254609 50292 CVE-2009-3077 RHSA-2010:0153  View
254610 50292 CVE-2009-3077 RHSA-2010:0154  View
254611 50292 CVE-2009-3077 36343  View
254612 50292 CVE-2009-3077 USN-915-1  View
254613 50292 CVE-2009-3077 ADV-2010-0650  View
254614 50292 CVE-2009-3077 https://bugzilla.mozilla.org/show_bug.cgi?id=506871  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41093 JVNDB-2009-002100 Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性 Mozilla Firefox には、XUL ツリー要素の列に対するポインタを適切に管理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-3077 40508 CVE-2009-3077 50292 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002100.html 2009-09-09 2010-04-01 View