Lucene search
Ubuntu.comUB:CVE-2009-1169HistoryMar 27, 2009 - 12:00 a.m.
CVE-2009-1169
2009-03-2700:00:00
ubuntu.com
ubuntu.com
12
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.96 High
EPSS
Percentile
99.5%
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox
before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a
denial of service (crash) and possibly execute arbitrary code via an XML
file with a crafted XSLT transform.
Notes
| Author | Note |
|---|---|
| kees | very late in the day announcement http://blog.mozilla.com/blog/2009/03/27/firefox-308-security-release-now-available/ |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | firefox | <Β 1.5.dfsg+1.5.0.15~prepatch080614l-0ubuntu1 | UNKNOWN |
| ubuntu | 7.10 | noarch | firefox | <Β 2.0.0.21~tb.21.308+nobinonly-0ubuntu0.7.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu0.8.04.2 | UNKNOWN |
| ubuntu | 8.10 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu0.8.10.2 | UNKNOWN |
| ubuntu | 9.04 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu2 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu2 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu2 | UNKNOWN |
| ubuntu | 10.10 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu2 | UNKNOWN |
| ubuntu | 11.04 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu2 | UNKNOWN |
| ubuntu | 11.10 | noarch | seamonkey | <Β 1.1.15+nobinonly-0ubuntu2 | UNKNOWN |
Related
openvas
openvas
Mozilla Seamonkey XSL Parsing Vulnerability (Linux)
2009-04-08 00:00:00
Firefox XSL Parsing Vulnerability - Linux
2009-04-08 00:00:00
Firefox XSL Parsing Vulnerability (Windows)
2009-04-08 00:00:00
prion
prion
Code injection
2009-03-27 00:30:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox XSL Transformation Memory Corruption (CVE-2009-1169)
2010-03-31 00:00:00
Mozilla Firefox XSL Transformation Memory Corruption - Ver2 (CVE-2009-1169)
2015-03-26 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-12
2009-04-01 00:00:00
Mozilla Firefox / Seamonkey / Thunderbird multiple security vulnerabilities
2009-04-01 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:31:20
mozilla
mozilla
XSL Transformation vulnerability β Mozilla
2009-03-27 00:00:00
seebug
seebug
Firefox XSL解ζroot XMLζ ηΎε
εη ΄εζΌζ΄
2009-04-01 00:00:00
cve
cve
CVE-2009-1169
2009-03-27 00:30:00
nessus
nessus
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0398)
2013-07-12 00:00:00
CentOS 3 : seamonkey (CESA-2009:0398)
2009-03-30 00:00:00
Firefox < 3.0.8 Multiple Vulnerabilities
2009-03-30 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: Miro-2.0.3-2.fc9
2009-03-28 17:24:32
[SECURITY] Fedora 9 Update: epiphany-2.22.2-9.fc9
2009-03-28 01:24:44
[SECURITY] Fedora 9 Update: mugshot-1.2.2-7.fc9
2009-03-28 17:24:32
debian
debian
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-03-28 00:00:00
redhat
redhat
(RHSA-2009:0398) Critical: seamonkey security update
2009-03-27 00:00:00
(RHSA-2009:0397) Critical: firefox security update
2009-03-27 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-03-29 00:00:00
firefox security update
2009-03-29 00:00:00
centos
centos
firefox, xulrunner security update
2009-04-09 17:48:16
seamonkey security update
2009-03-30 22:53:22
seamonkey security update
2009-03-28 14:45:12
osv
osv
xulrunner - multiple vulnerabilities
2009-03-29 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-04-20 12:00:48
remote code execution in MozillaFirefox
2009-04-20 12:01:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.96 High
EPSS
Percentile
99.5%
Related for UB:CVE-2009-1169