Lucene search
Ubuntu.comUB:CVE-2009-3077HistorySep 10, 2009 - 12:00 a.m.
CVE-2009-3077
2009-09-1000:00:00
ubuntu.com
ubuntu.com
17
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.275 Low
EPSS
Percentile
96.7%
Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly
manage pointers for the columns (aka TreeColumns) of a XUL tree element,
which allows remote attackers to execute arbitrary code via a crafted HTML
document, related to a “dangling pointer vulnerability.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | firefox-3.0 | < 3.0.14+build2+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | firefox-3.0 | < 3.0.14+build2+nobinonly-0ubuntu0.8.10.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | firefox-3.0 | < 3.0.14+build2+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | firefox-3.5 | < 3.5.3+build1+nobinonly-0ubuntu0.9.04.2 | UNKNOWN |
| ubuntu | 8.04 | noarch | thunderbird | < 2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | thunderbird | < 2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | thunderbird | < 2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | thunderbird | < 2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | xulrunner-1.9 | < 1.9.0.14+build2+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | xulrunner-1.9 | < 1.9.0.14+build2+nobinonly-0ubuntu0.8.10.1 | UNKNOWN |
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-49
2009-09-10 00:00:00
ZDI-09-065: Mozilla Firefox TreeColumns Dangling Pointer Vulnerability
2009-09-11 00:00:00
Mozilla Firefox multiple security vulnerabilities
2009-09-11 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:38:02
cve
cve
CVE-2009-3077
2009-09-10 21:30:00
zdi
zdi
Mozilla Firefox TreeColumns Dangling Pointer Vulnerability
2009-09-10 00:00:00
prion
prion
Design/Logic Flaw
2009-09-10 21:30:00
mozilla
mozilla
TreeColumns dangling pointer vulnerability — Mozilla
2009-09-09 00:00:00
openvas
openvas
Mozilla Firefox Multiple Vulnerabilities (Sep 2009) - Linux
2009-09-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - Sep09 (Linux)
2009-09-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - Sep09 (Windows)
2009-09-11 00:00:00
redhat
redhat
(RHSA-2009:1431) Critical: seamonkey security update
2009-09-09 00:00:00
(RHSA-2009:1432) Critical: seamonkey security update
2009-09-09 00:00:00
(RHSA-2009:1430) Critical: firefox security update
2009-09-09 00:00:00
centos
centos
seamonkey security update
2009-09-10 22:51:03
seamonkey security update
2009-09-10 11:03:30
firefox, nspr, xulrunner security update
2009-09-10 22:47:20
oraclelinux
oraclelinux
seamonkey security update
2009-09-10 00:00:00
firefox security update
2009-09-10 00:00:00
thunderbird security update
2010-03-17 00:00:00
nessus
nessus
Firefox 3.5.x < 3.5.3 Multiple Vulnerabilities
2009-09-10 00:00:00
RHEL 4 : seamonkey (RHSA-2009:1431)
2009-09-10 00:00:00
Oracle Linux 3 : seamonkey (ELSA-2009-1432)
2013-07-12 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-03-18 00:00:00
Firefox and Xulrunner vulnerabilities
2009-09-10 00:00:00
debian
debian
[SECURITY] [DSA 1885-1] New xulrunner packages fix several vulnerabilities
2009-09-14 17:05:35
osv
osv
xulrunner - several vulnerabilities
2009-09-14 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-22.fc10
2009-09-11 23:28:07
[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-13.fc10
2009-09-11 23:28:07
[SECURITY] Fedora 10 Update: Miro-2.0.5-4.fc10
2009-09-11 23:28:07
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-03-16 00:00:00
mozilla firefox -- multiple vulnerabilities
2009-09-10 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-10-20 17:59:46
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.275 Low
EPSS
Percentile
96.7%
Related for UB:CVE-2009-3077