Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2009-1392

Overview

Vulnerability Score 9.3 9.3
CVE Id CVE-2009-1392
Last Modified 21 Aug 2010 01:32:00
Published 12 Jun 2009 05:30:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2009-1392

Summary

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.

Vulnerable Systems

Application

  • Mozilla Firefox 3.0

  • Mozilla Firefox 3.0.1

  • Mozilla Firefox 3.0.10

  • Mozilla Firefox 3.0.2

  • Mozilla Firefox 3.0.3

  • Mozilla Firefox 3.0.4

  • Mozilla Firefox 3.0.5

  • Mozilla Firefox 3.0.6

  • Mozilla Firefox 3.0.7

  • Mozilla Firefox 3.0.8

  • Mozilla Firefox 3.0.9

  • Mozilla Seamonkey 1.0

  • Mozilla Seamonkey 1.0.1

  • Mozilla Seamonkey 1.0.3

  • Mozilla Seamonkey 1.0.4

  • Mozilla Seamonkey 1.0.6

  • Mozilla Seamonkey 1.0.8

  • Mozilla Seamonkey 1.0.9

  • Mozilla Seamonkey 1.0.99

  • Mozilla Seamonkey 1.1

  • Mozilla Seamonkey 1.1.1

  • Mozilla Seamonkey 1.1.10

  • Mozilla Seamonkey 1.1.11

  • Mozilla Seamonkey 1.1.12

  • Mozilla Seamonkey 1.1.13

  • Mozilla Seamonkey 1.1.15

  • Mozilla Seamonkey 1.1.16

  • Mozilla Seamonkey 1.1.3

  • Mozilla Seamonkey 1.1.5

  • Mozilla Seamonkey 1.1.6

  • Mozilla Seamonkey 1.1.7

  • Mozilla Seamonkey 1.1.8

  • Mozilla Seamonkey 1.1.9

  • Mozilla Thunderbird 0.1

  • Mozilla Thunderbird 0.2

  • Mozilla Thunderbird 0.3

  • Mozilla Thunderbird 0.4

  • Mozilla Thunderbird 0.5

  • Mozilla Thunderbird 0.6

  • Mozilla Thunderbird 0.7

  • Mozilla Thunderbird 0.7.1

  • Mozilla Thunderbird 0.7.2

  • Mozilla Thunderbird 0.7.3

  • Mozilla Thunderbird 0.8

  • Mozilla Thunderbird 0.9

  • Mozilla Thunderbird 1.0

  • Mozilla Thunderbird 1.0.1

  • Mozilla Thunderbird 1.0.2

  • Mozilla Thunderbird 1.0.3

  • Mozilla Thunderbird 1.0.4

  • Mozilla Thunderbird 1.0.5

  • Mozilla Thunderbird 1.0.6

  • Mozilla Thunderbird 1.0.7

  • Mozilla Thunderbird 1.0.8

  • Mozilla Thunderbird 1.5

  • Mozilla Thunderbird 1.5.0.1

  • Mozilla Thunderbird 1.5.0.10

  • Mozilla Thunderbird 1.5.0.11

  • Mozilla Thunderbird 1.5.0.12

  • Mozilla Thunderbird 1.5.0.13

  • Mozilla Thunderbird 1.5.0.14

  • Mozilla Thunderbird 1.5.0.2

  • Mozilla Thunderbird 1.5.0.3

  • Mozilla Thunderbird 1.5.0.4

  • Mozilla Thunderbird 1.5.0.5

  • Mozilla Thunderbird 1.5.0.6

  • Mozilla Thunderbird 1.5.0.7

  • Mozilla Thunderbird 1.5.0.8

  • Mozilla Thunderbird 1.5.0.9

  • Mozilla Thunderbird 1.5.1

  • Mozilla Thunderbird 1.5.2

  • Mozilla Thunderbird 1.7.1

  • Mozilla Thunderbird 1.7.3

  • Mozilla Thunderbird 2.0 .12

  • Mozilla Thunderbird 2.0 .13

  • Mozilla Thunderbird 2.0 .14

  • Mozilla Thunderbird 2.0 .4

  • Mozilla Thunderbird 2.0 .5

  • Mozilla Thunderbird 2.0 .6

  • Mozilla Thunderbird 2.0 .9

  • Mozilla Thunderbird 2.0 8

  • Mozilla Thunderbird 2.0.0.0

  • Mozilla Thunderbird 2.0.0.1

  • Mozilla Thunderbird 2.0.0.11

  • Mozilla Thunderbird 2.0.0.12

  • Mozilla Thunderbird 2.0.0.13

  • Mozilla Thunderbird 2.0.0.14

  • Mozilla Thunderbird 2.0.0.15

  • Mozilla Thunderbird 2.0.0.16

  • Mozilla Thunderbird 2.0.0.17

  • Mozilla Thunderbird 2.0.0.18

  • Mozilla Thunderbird 2.0.0.19

  • Mozilla Thunderbird 2.0.0.2

  • Mozilla Thunderbird 2.0.0.3

  • Mozilla Thunderbird 2.0.0.4

  • Mozilla Thunderbird 2.0.0.5

  • Mozilla Thunderbird 2.0.0.6

  • Mozilla Thunderbird 2.0.0.7

  • Mozilla Thunderbird 2.0.0.8

  • Mozilla Thunderbird 2.0.0.9

  • Mozilla Thunderbird 2.0.14


References

REDHAT - RHSA-2009:1095

VUPEN - ADV-2009-1572

SECTRACK - 1022376

REDHAT - RHSA-2009:1096

FEDORA - FEDORA-2009-6411

FEDORA - FEDORA-2009-6366

CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=503568

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=490513

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=490425

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=490410

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=489041

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=486398

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=472776

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=451341

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=432068

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=431086

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=429969

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=380359

VUPEN - ADV-2009-2152

UBUNTU - USN-782-1

SLACKWARE - SSA:2009-178-01

SECTRACK - 1022397

BID - 35370

BID - 35326

REDHAT - RHSA-2009:1126

REDHAT - RHSA-2009:1125

CONFIRM - http://www.mozilla.org/security/announce/2009/mfsa2009-24.html

MANDRIVA - MDVSA-2009:141

DEBIAN - DSA-1830

DEBIAN - DSA-1820

SUNALERT - 1020800

SUNALERT - 265068

SLACKWARE - SSA:2009-176-01

SLACKWARE - SSA:2009-167-01

SECUNIA - 35602

SECUNIA - 35561

SECUNIA - 35536

SECUNIA - 35468

SECUNIA - 35440

SECUNIA - 35439

SECUNIA - 35431

SECUNIA - 35428

SECUNIA - 35415

SECUNIA - 35331

OSVDB - 55147

OSVDB - 55146

OSVDB - 55145

OSVDB - 55144


Last Updated: 27 May 2016 10:50:33