Lucene search
RootSSV:12551HistoryOct 31, 2009 - 12:00 a.m.
Mozilla Firefox浮点转换堆溢出漏洞
2009-10-3100:00:00
Root
www.seebug.org
13
BUGTRAQ ID: 36851
CVE(CAN) ID: CVE-2009-1563
Firefox是一款流行的开源WEB浏览器。
Firefox的字符串到浮点数转换例程中存在堆溢出漏洞，在将包含有超长字符串的JavaScript代码转换为浮点数的时候就可能触发这个溢出，导致执行任意代码。
Mozilla Firefox 3.5.x
Mozilla Firefox 3.0.x
厂商补丁：
Mozilla
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2009:1530-01）以及相应补丁:
RHSA-2009:1530-01：Critical: firefox security update
链接：https://www.redhat.com/support/errata/RHSA-2009-1530.html
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-59
2009-10-28 00:00:00
K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)
2009-11-20 00:00:00
checkpoint_advisories
checkpoint_advisories
packetstorm
packetstorm
Opera 10.01 Remote Array Overrun
2009-11-20 00:00:00
K-Meleon 1.5.3 Remote Array Overrun
2009-11-20 00:00:00
SeaMonkey 1.1.0 Remote Array Overrun
2009-11-20 00:00:00
nessus
nessus
SuSE 11 Security Update : Mozilla (SAT Patch Number 1503)
2009-11-09 00:00:00
openSUSE Security Update : mozilla-nspr (mozilla-nspr-1510)
2009-11-09 00:00:00
SuSE 10 Security Update : mozilla-nspr (ZYPP Patch Number 6631)
2010-10-11 00:00:00
exploitpack
exploitpack
KDE KDELibs 4.3.3 - Remote Array Overrun
2009-11-19 00:00:00
SeaMonkey 1.1.8 - Remote Array Overrun
2009-11-19 00:00:00
K-Meleon 1.5.3 - Remote Array Overrun
2009-11-19 00:00:00
debian
debian
[SECURITY] [DSA 1931-1] New NSPR packages fix several vulnerabilities
2009-11-08 10:07:37
cve
cve
CVE-2009-1563
2009-10-29 14:30:00
seebug
seebug
K-Meleon 1.5.3 Remote Array Overrun
2009-11-19 00:00:00
Opera 10.01 Remote Array Overrun
2009-11-19 00:00:00
Opera 10.01 Remote Array Overrun (Arbitrary code execution)
2009-11-22 00:00:00
osv
osv
nspr - several vulnerabilities
2009-11-08 00:00:00
ubuntucve
ubuntucve
CVE-2009-0689
2009-07-01 00:00:00
exploitdb
exploitdb
K-Meleon 1.5.3 - Remote Array Overrun
2009-11-19 00:00:00
KDE KDELibs 4.3.3 - Remote Array Overrun
2009-11-19 00:00:00
SeaMonkey 1.1.8 - Remote Array Overrun
2009-11-19 00:00:00
openvas
openvas
Debian Security Advisory DSA 1931-1 (nspr)
2009-11-11 00:00:00
Debian: Security Advisory (DSA-1931-1)
2009-11-11 00:00:00
RedHat Security Advisory RHSA-2009:1531
2009-11-11 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-10-28 00:00:00
firefox security update
2009-10-28 00:00:00
centos
centos
seamonkey security update
2009-10-28 13:15:48
firefox, nspr security update
2009-10-28 13:44:04
redhat
redhat
(RHSA-2009:1531) Critical: seamonkey security update
2009-10-27 00:00:00
(RHSA-2009:1530) Critical: firefox security update
2009-10-27 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: ruby-gnome2-0.19.3-3.fc11
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: epiphany-2.26.3-5.fc11
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: epiphany-extensions-2.26.1-7.fc11
2009-10-29 02:59:35
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-10-31 00:00:00
Firefox and Xulrunner regression
2009-11-11 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-11-04 14:24:35
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-10-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
Related for SSV:12551