[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-0352Date: (C)2009-02-04   (M)2024-02-16


Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1021663
BID-33598
SECUNIA-33799
SECUNIA-33802
SECUNIA-33808
SECUNIA-33809
SECUNIA-33816
SECUNIA-33831
SECUNIA-33841
SECUNIA-33846
SECUNIA-33869
SECUNIA-34324
SECUNIA-34387
SECUNIA-34417
SECUNIA-34462
SECUNIA-34464
SECUNIA-34527
ADV-2009-0313
DSA-1830
FEDORA-2009-1399
FEDORA-2009-2882
FEDORA-2009-2884
FEDORA-2009-3101
MDVSA-2009:044
MDVSA-2009:083
RHSA-2009:0256
RHSA-2009:0257
RHSA-2009:0258
SSA:2009-083-02
SSA:2009-083-03
SUSE-SA:2009:009
SUSE-SA:2009:023
USN-717-1
USN-741-1
http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm
http://www.mozilla.org/security/announce/2009/mfsa2009-01.html
https://bugzilla.mozilla.org/show_bug.cgi?id=331088
https://bugzilla.mozilla.org/show_bug.cgi?id=401042
https://bugzilla.mozilla.org/show_bug.cgi?id=416461
https://bugzilla.mozilla.org/show_bug.cgi?id=420697
https://bugzilla.mozilla.org/show_bug.cgi?id=421839
https://bugzilla.mozilla.org/show_bug.cgi?id=422283
https://bugzilla.mozilla.org/show_bug.cgi?id=422301
https://bugzilla.mozilla.org/show_bug.cgi?id=431705
https://bugzilla.mozilla.org/show_bug.cgi?id=437142
https://bugzilla.mozilla.org/show_bug.cgi?id=449006
https://bugzilla.mozilla.org/show_bug.cgi?id=461027
oval:org.mitre.oval:def:10699

CPE    70
cpe:/a:mozilla:thunderbird:2.0.0.18
cpe:/a:mozilla:thunderbird:2.0.0.14
cpe:/a:mozilla:thunderbird:2.0.0.16
cpe:/a:mozilla:thunderbird:2.0.0.17
...
CWE    1
CWE-399
OVAL    75
oval:org.secpod.oval:def:700431
oval:org.secpod.oval:def:200510
oval:org.secpod.oval:def:200636
oval:org.secpod.oval:def:200609
...

© SecPod Technologies