CVE-2009-2464

2009-07-2200:00:00

ubuntu.com

0.58 Medium

EPSS

Percentile

97.7%

JSON

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla
Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote
attackers to cause a denial of service (memory corruption and application
crash) or possibly execute arbitrary code via vectors related to loading
multiple RDF files in a XUL tree element.

Bugs

<https://bugzilla.mozilla.org/show_bug.cgi?id=441785>

Notes

Author	Note
jdtrand	per upstream bug, doesn’t affect xul 1.8

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchxulrunner-1.9< 1.9.0.12+build1+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9< 1.9.0.12+build1+nobinonly-0ubuntu0.8.10.2UNKNOWN
ubuntu9.04noarchxulrunner-1.9< 1.9.0.12+build1+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9.1< 1.9.1.1+build1+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchxulrunner-1.9.1< 1.9.1.1+build1+nobinonly-0ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	xulrunner-1.9	< 1.9.0.12+build1+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	xulrunner-1.9	< 1.9.0.12+build1+nobinonly-0ubuntu0.8.10.2	UNKNOWN
ubuntu	9.04	noarch	xulrunner-1.9	< 1.9.0.12+build1+nobinonly-0ubuntu0.9.04.1	UNKNOWN
ubuntu	9.04	noarch	xulrunner-1.9.1	< 1.9.1.1+build1+nobinonly-0ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	xulrunner-1.9.1	< 1.9.1.1+build1+nobinonly-0ubuntu1	UNKNOWN