Lucene search

[email protected]NVD:CVE-2009-0773

HistoryMar 05, 2009 - 2:30 a.m.

CVE-2009-0773

2009-03-0502:30:00

CWE-399

[email protected]

web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.941 High

EPSS

Percentile

99.2%

JSON

The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains “some non-set elements,” which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, defineSetter, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, defineSetter, and watch, which triggers a hang.

Affected configurations

NVD

Node

mozillafirefoxRange≤3.0.6

mozillafirefoxMatch1.0

mozillafirefoxMatch1.0.1

mozillafirefoxMatch1.0.2

mozillafirefoxMatch1.0.3

mozillafirefoxMatch1.0.4

mozillafirefoxMatch1.0.5

mozillafirefoxMatch1.0.6

mozillafirefoxMatch1.0.7

mozillafirefoxMatch1.0.8

mozillafirefoxMatch1.5

mozillafirefoxMatch1.5.0.1

mozillafirefoxMatch1.5.0.2

mozillafirefoxMatch1.5.0.3

mozillafirefoxMatch1.5.0.4

mozillafirefoxMatch1.5.0.5

mozillafirefoxMatch1.5.0.6

mozillafirefoxMatch1.5.0.7

mozillafirefoxMatch1.5.0.8

mozillafirefoxMatch1.5.0.9

mozillafirefoxMatch1.5.0.10

mozillafirefoxMatch1.5.0.11

mozillafirefoxMatch1.5.0.12

mozillafirefoxMatch2.0

mozillafirefoxMatch2.0.0.1

mozillafirefoxMatch2.0.0.2

mozillafirefoxMatch2.0.0.3

mozillafirefoxMatch2.0.0.4

mozillafirefoxMatch2.0.0.5

mozillafirefoxMatch2.0.0.6

mozillafirefoxMatch2.0.0.7

mozillafirefoxMatch2.0.0.8

mozillafirefoxMatch2.0.0.9

mozillafirefoxMatch2.0.0.10

mozillafirefoxMatch2.0.0.11

mozillafirefoxMatch2.0.0.12

mozillafirefoxMatch2.0.0.13

mozillafirefoxMatch2.0.0.14

mozillafirefoxMatch2.0.0.15

mozillafirefoxMatch2.0.0.16

mozillafirefoxMatch2.0.0.17

mozillafirefoxMatch2.0.0.18

mozillafirefoxMatch2.0.0.19

mozillafirefoxMatch2.0.0.20

mozillafirefoxMatch3.0

mozillafirefoxMatch3.0.1

mozillafirefoxMatch3.0.2

mozillafirefoxMatch3.0.3

mozillafirefoxMatch3.0.4

mozillafirefoxMatch3.0.5

mozillaseamonkeyRange≤1.1.14

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1alpha

mozillaseamonkeyMatch1.1beta

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillathunderbirdRange≤2.0.0.20

mozillathunderbirdMatch2.0.0.0

mozillathunderbirdMatch2.0.0.4

mozillathunderbirdMatch2.0.0.5

mozillathunderbirdMatch2.0.0.6

mozillathunderbirdMatch2.0.0.9

mozillathunderbirdMatch2.0.0.12

mozillathunderbirdMatch2.0.0.14

mozillathunderbirdMatch2.0.0.16

mozillathunderbirdMatch2.0.0.17

mozillathunderbirdMatch2.0.0.18

mozillathunderbirdMatch2.0.0.19

References

lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

secunia.com/advisories/34140

secunia.com/advisories/34145

secunia.com/advisories/34272

secunia.com/advisories/34383

secunia.com/advisories/34462

secunia.com/advisories/34464

secunia.com/advisories/34527

slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420

slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952

support.avaya.com/elmodocs2/security/ASA-2009-069.htm

support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

www.debian.org/security/2009/dsa-1751

www.debian.org/security/2009/dsa-1830

www.mandriva.com/security/advisories?name=MDVSA-2009:075

www.mandriva.com/security/advisories?name=MDVSA-2009:083

www.mozilla.org/security/announce/2009/mfsa2009-07.html

www.redhat.com/support/errata/RHSA-2009-0315.html

www.securityfocus.com/bid/33990

www.securitytracker.com/id?1021795

www.vupen.com/english/advisories/2009/0632

bugzilla.mozilla.org/show_bug.cgi?id=457521

bugzilla.mozilla.org/show_bug.cgi?id=467499

bugzilla.mozilla.org/show_bug.cgi?id=472787

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708

www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.941 High

EPSS

Percentile

99.2%

JSON

Related for NVD:CVE-2009-0773

cve2 prion2 ubuntucve2 veracode1 cvelist2 checkpoint_advisories1 nvd1 mozilla1 securityvulns2 nessus25 openvas51 osv2 debian2 fedora41 suse2 centos1 oraclelinux1 redhat1 ubuntu1 gentoo1