Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-745-1
HistoryMar 28, 2009 - 12:00 a.m.

Firefox and Xulrunner vulnerabilities

2009-03-2800:00:00
ubuntu.com
31

10 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

JSON

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 6.06

Packages

  • firefox -
  • firefox-3.0 -
  • xulrunner-1.9 -

Details

It was discovered that Firefox did not properly perform XUL garbage
collection. If a user were tricked into viewing a malicious website, a
remote attacker could cause a denial of service or execute arbitrary code
with the privileges of the user invoking the program. This issue only
affected Ubuntu 8.04 LTS and 8.10. (CVE-2009-1044)

A flaw was discovered in the way Firefox performed XSLT transformations.
If a user were tricked into opening a crafted XSL stylesheet, an attacker
could cause a denial of service or execute arbitrary code with the
privileges of the user invoking the program. (CVE-2009-1169)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchfirefox-3.0< 3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchabrowser< 3.0-branding-3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchfirefox< 3.0-3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchfirefox< 3.0-branding-3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchfirefox< 3.0-dev-3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchfirefox< 3.0-gnome-support-3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchabrowser< 3.0.8+nobinonly-0ubuntu0.8.10.2UNKNOWN
Ubuntu8.10noarchxulrunner-1.9< 1.9.0.8+nobinonly-0ubuntu0.8.10.1UNKNOWN
Ubuntu8.10noarchxulrunner-1.9< dev-1.9.0.8+nobinonly-0ubuntu0.8.10.1UNKNOWN
Ubuntu8.10noarchxulrunner-1.9< gnome-support-1.9.0.8+nobinonly-0ubuntu0.8.10.1UNKNOWN
Rows per page:
1-10 of 311

Related

nessus 24
fedora 58
debian 2
openvas 51
centos 3
oraclelinux 2
redhat 2
osv 1
suse 2
prion 2
cve 2
checkpoint_advisories 4
seebug 3
veracode 2
zdi 1
securityvulns 4
mozilla 2
ubuntucve 2
gentoo 1
nessus
nessus
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0398)
2013-07-12 00:00:00
CentOS 3 : seamonkey (CESA-2009:0398)
2009-03-30 00:00:00
Firefox < 3.0.8 Multiple Vulnerabilities
2009-03-30 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: Miro-2.0.3-2.fc9
2009-03-28 17:24:32
[SECURITY] Fedora 9 Update: epiphany-2.22.2-9.fc9
2009-03-28 01:24:44
[SECURITY] Fedora 9 Update: mugshot-1.2.2-7.fc9
2009-03-28 17:24:32
debian
debian
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
openvas
openvas
Fedora Core 10 FEDORA-2009-3100 (firefox)
2009-04-06 00:00:00
Mandrake Security Advisory MDVSA-2009:084 (firefox)
2009-04-06 00:00:00
CentOS Security Advisory CESA-2009:0398-01 (seamonkey)
2009-04-06 00:00:00
centos
centos
seamonkey security update
2009-03-28 14:45:12
firefox, xulrunner security update
2009-04-09 17:48:16
seamonkey security update
2009-03-30 22:53:22
oraclelinux
oraclelinux
firefox security update
2009-03-29 00:00:00
seamonkey security update
2009-03-29 00:00:00
redhat
redhat
(RHSA-2009:0397) Critical: firefox security update
2009-03-27 00:00:00
(RHSA-2009:0398) Critical: seamonkey security update
2009-03-27 00:00:00
osv
osv
xulrunner - multiple vulnerabilities
2009-03-29 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-04-20 12:00:48
remote code execution in MozillaFirefox
2009-04-20 12:01:40
prion
prion
Code injection
2009-03-27 00:30:00
Design/Logic Flaw
2009-03-23 14:19:00
cve
cve
CVE-2009-1044
2009-03-23 14:19:00
CVE-2009-1169
2009-03-27 00:30:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)
2014-03-31 00:00:00
Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)
2014-03-31 00:00:00
Mozilla Firefox XSL Transformation Memory Corruption - Ver2 (CVE-2009-1169)
2015-03-26 00:00:00
seebug
seebug
Firefox _moveToEdgeShift方式远程代码执行漏洞
2009-04-01 00:00:00
Mozilla Firefox '_moveToEdgeShift' 远程代码执行漏洞
2009-04-04 00:00:00
Firefox XSL解析root XML标签内存破坏漏洞
2009-04-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:31:20
Arbitrary Code Execution
2020-04-10 00:31:20
zdi
zdi
Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability
2009-03-30 00:00:00
securityvulns
securityvulns
ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift&#40;&#41; Memory Corruption Vulnerability
2009-04-01 00:00:00
Mozilla Foundation Security Advisory 2009-13
2009-04-01 00:00:00
Mozilla Foundation Security Advisory 2009-12
2009-04-01 00:00:00
mozilla
mozilla
Arbitrary code execution via XUL tree element — Mozilla
2009-03-27 00:00:00
XSL Transformation vulnerability — Mozilla
2009-03-27 00:00:00
ubuntucve
ubuntucve
CVE-2009-1044
2009-03-27 00:00:00
CVE-2009-1169
2009-03-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

10 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

JSON
Related for USN-745-1
nessus24fedora58debian2openvas51centos3oraclelinux2redhat2osv1suse2prion2cve2checkpoint_advisories4seebug3veracode2zdi1securityvulns4mozilla2ubuntucve2gentoo1