CVE-2009-1838

EPSS 4.8%
Veröffentlicht 12.06.2009 21:30:00
Zuletzt bearbeitet 16.06.2026 23:08:10
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 39

NVD 202 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 3.0.10

Mozilla ≫ Firefox Version0.1

Mozilla ≫ Firefox Version0.2

Mozilla ≫ Firefox Version0.3

Mozilla ≫ Firefox Version0.4

Mozilla ≫ Firefox Version0.5

Mozilla ≫ Firefox Version0.6

Mozilla ≫ Firefox Version0.6.1

Mozilla ≫ Firefox Version0.7

Mozilla ≫ Firefox Version0.7.1

Mozilla ≫ Firefox Version0.8

Mozilla ≫ Firefox Version0.9

Mozilla ≫ Firefox Version0.9 Updaterc

Mozilla ≫ Firefox Version0.9.1

Mozilla ≫ Firefox Version0.9.2

Mozilla ≫ Firefox Version0.9.3

Mozilla ≫ Firefox Version0.9_rc

Mozilla ≫ Firefox Version0.10

Mozilla ≫ Firefox Version0.10.1

Mozilla ≫ Firefox Version1.0

Mozilla ≫ Firefox Version1.0 Updatepreview_release

Mozilla ≫ Firefox Version1.0.1

Mozilla ≫ Firefox Version1.0.2

Mozilla ≫ Firefox Version1.0.3

Mozilla ≫ Firefox Version1.0.4

Mozilla ≫ Firefox Version1.0.5

Mozilla ≫ Firefox Version1.0.6

Mozilla ≫ Firefox Version1.0.6 Editionlinux

Mozilla ≫ Firefox Version1.0.7

Mozilla ≫ Firefox Version1.0.8

Mozilla ≫ Firefox Version1.4.1

Mozilla ≫ Firefox Version1.5

Mozilla ≫ Firefox Version1.5 Updatebeta1

Mozilla ≫ Firefox Version1.5 Updatebeta2

Mozilla ≫ Firefox Version1.5.0.1

Mozilla ≫ Firefox Version1.5.0.2

Mozilla ≫ Firefox Version1.5.0.3

Mozilla ≫ Firefox Version1.5.0.4

Mozilla ≫ Firefox Version1.5.0.5

Mozilla ≫ Firefox Version1.5.0.6

Mozilla ≫ Firefox Version1.5.0.7

Mozilla ≫ Firefox Version1.5.0.8

Mozilla ≫ Firefox Version1.5.0.9

Mozilla ≫ Firefox Version1.5.0.10

Mozilla ≫ Firefox Version1.5.0.11

Mozilla ≫ Firefox Version1.5.0.12

Mozilla ≫ Firefox Version1.5.1

Mozilla ≫ Firefox Version1.5.2

Mozilla ≫ Firefox Version1.5.3

Mozilla ≫ Firefox Version1.5.4

Mozilla ≫ Firefox Version1.5.5

Mozilla ≫ Firefox Version1.5.6

Mozilla ≫ Firefox Version1.5.7

Mozilla ≫ Firefox Version1.5.8

Mozilla ≫ Firefox Version1.8

Mozilla ≫ Firefox Version2.0

Mozilla ≫ Firefox Version2.0 Updatebeta_1

Mozilla ≫ Firefox Version2.0 Updatebeta1

Mozilla ≫ Firefox Version2.0 Updaterc2

Mozilla ≫ Firefox Version2.0 Updaterc3

Mozilla ≫ Firefox Version2.0.0.1

Mozilla ≫ Firefox Version2.0.0.2

Mozilla ≫ Firefox Version2.0.0.3

Mozilla ≫ Firefox Version2.0.0.4

Mozilla ≫ Firefox Version2.0.0.5

Mozilla ≫ Firefox Version2.0.0.6

Mozilla ≫ Firefox Version2.0.0.7

Mozilla ≫ Firefox Version2.0.0.8

Mozilla ≫ Firefox Version2.0.0.9

Mozilla ≫ Firefox Version2.0.0.10

Mozilla ≫ Firefox Version2.0.0.11

Mozilla ≫ Firefox Version2.0.0.12

Mozilla ≫ Firefox Version2.0.0.13

Mozilla ≫ Firefox Version2.0.0.14

Mozilla ≫ Firefox Version2.0.0.15

Mozilla ≫ Firefox Version2.0.0.16

Mozilla ≫ Firefox Version2.0.0.17

Mozilla ≫ Firefox Version2.0.0.18

Mozilla ≫ Firefox Version2.0.0.19

Mozilla ≫ Firefox Version2.0.0.20

Mozilla ≫ Firefox Version2.0.0.21

Mozilla ≫ Firefox Version2.0_.1

Mozilla ≫ Firefox Version2.0_.4

Mozilla ≫ Firefox Version2.0_.5

Mozilla ≫ Firefox Version2.0_.6

Mozilla ≫ Firefox Version2.0_.7

Mozilla ≫ Firefox Version2.0_.9

Mozilla ≫ Firefox Version2.0_.10

Mozilla ≫ Firefox Version2.0_8

Mozilla ≫ Firefox Version3.0

Mozilla ≫ Firefox Version3.0 Updatealpha

Mozilla ≫ Firefox Version3.0 Updatebeta2

Mozilla ≫ Firefox Version3.0 Updatebeta5

Mozilla ≫ Firefox Version3.0.1

Mozilla ≫ Firefox Version3.0.2

Mozilla ≫ Firefox Version3.0.3

Mozilla ≫ Firefox Version3.0.4

Mozilla ≫ Firefox Version3.0.5

Mozilla ≫ Firefox Version3.0.6

Mozilla ≫ Firefox Version3.0.7

Mozilla ≫ Firefox Version3.0.8

Mozilla ≫ Firefox Version3.0.9

Mozilla ≫ Firefox Version3.0beta5

Mozilla ≫ Seamonkey Version <= 1.1.16

Mozilla ≫ Seamonkey Version1.0

Mozilla ≫ Seamonkey Version1.0 Editionalpha

Mozilla ≫ Seamonkey Version1.0 Editionbeta

Mozilla ≫ Seamonkey Version1.0 Editiondev

Mozilla ≫ Seamonkey Version1.0 Updatealpha

Mozilla ≫ Seamonkey Version1.0 Updatebeta

Mozilla ≫ Seamonkey Version1.0.1

Mozilla ≫ Seamonkey Version1.0.3

Mozilla ≫ Seamonkey Version1.0.4

Mozilla ≫ Seamonkey Version1.0.6

Mozilla ≫ Seamonkey Version1.0.8

Mozilla ≫ Seamonkey Version1.0.9

Mozilla ≫ Seamonkey Version1.0.99

Mozilla ≫ Seamonkey Version1.1

Mozilla ≫ Seamonkey Version1.1 Updatealpha

Mozilla ≫ Seamonkey Version1.1 Updatebeta

Mozilla ≫ Seamonkey Version1.1.1

Mozilla ≫ Seamonkey Version1.1.3

Mozilla ≫ Seamonkey Version1.1.5

Mozilla ≫ Seamonkey Version1.1.5 Update1.1.10

Mozilla ≫ Seamonkey Version1.1.6

Mozilla ≫ Seamonkey Version1.1.7

Mozilla ≫ Seamonkey Version1.1.8

Mozilla ≫ Seamonkey Version1.1.9

Mozilla ≫ Seamonkey Version1.1.10

Mozilla ≫ Seamonkey Version1.1.11

Mozilla ≫ Seamonkey Version1.1.12

Mozilla ≫ Seamonkey Version1.1.13

Mozilla ≫ Seamonkey Version1.1.15

Mozilla ≫ Thunderbird Version <= 2.0.0.19

Mozilla ≫ Thunderbird Version0.1

Mozilla ≫ Thunderbird Version0.2

Mozilla ≫ Thunderbird Version0.3

Mozilla ≫ Thunderbird Version0.4

Mozilla ≫ Thunderbird Version0.5

Mozilla ≫ Thunderbird Version0.6

Mozilla ≫ Thunderbird Version0.7

Mozilla ≫ Thunderbird Version0.7.1

Mozilla ≫ Thunderbird Version0.7.2

Mozilla ≫ Thunderbird Version0.7.3

Mozilla ≫ Thunderbird Version0.8

Mozilla ≫ Thunderbird Version0.9

Mozilla ≫ Thunderbird Version1.0

Mozilla ≫ Thunderbird Version1.0.1

Mozilla ≫ Thunderbird Version1.0.2

Mozilla ≫ Thunderbird Version1.0.3

Mozilla ≫ Thunderbird Version1.0.4

Mozilla ≫ Thunderbird Version1.0.5

Mozilla ≫ Thunderbird Version1.0.5 Updatebeta

Mozilla ≫ Thunderbird Version1.0.6

Mozilla ≫ Thunderbird Version1.0.7

Mozilla ≫ Thunderbird Version1.0.8

Mozilla ≫ Thunderbird Version1.5

Mozilla ≫ Thunderbird Version1.5 Updatebeta2

Mozilla ≫ Thunderbird Version1.5.0.1

Mozilla ≫ Thunderbird Version1.5.0.2

Mozilla ≫ Thunderbird Version1.5.0.3

Mozilla ≫ Thunderbird Version1.5.0.4

Mozilla ≫ Thunderbird Version1.5.0.5

Mozilla ≫ Thunderbird Version1.5.0.6

Mozilla ≫ Thunderbird Version1.5.0.7

Mozilla ≫ Thunderbird Version1.5.0.8

Mozilla ≫ Thunderbird Version1.5.0.9

Mozilla ≫ Thunderbird Version1.5.0.10

Mozilla ≫ Thunderbird Version1.5.0.11

Mozilla ≫ Thunderbird Version1.5.0.12

Mozilla ≫ Thunderbird Version1.5.0.13

Mozilla ≫ Thunderbird Version1.5.0.14

Mozilla ≫ Thunderbird Version1.5.1

Mozilla ≫ Thunderbird Version1.5.2

Mozilla ≫ Thunderbird Version1.7.1

Mozilla ≫ Thunderbird Version1.7.3

Mozilla ≫ Thunderbird Version2.0.0.0

Mozilla ≫ Thunderbird Version2.0.0.1

Mozilla ≫ Thunderbird Version2.0.0.2

Mozilla ≫ Thunderbird Version2.0.0.3

Mozilla ≫ Thunderbird Version2.0.0.4

Mozilla ≫ Thunderbird Version2.0.0.5

Mozilla ≫ Thunderbird Version2.0.0.6

Mozilla ≫ Thunderbird Version2.0.0.7

Mozilla ≫ Thunderbird Version2.0.0.8

Mozilla ≫ Thunderbird Version2.0.0.9

Mozilla ≫ Thunderbird Version2.0.0.11

Mozilla ≫ Thunderbird Version2.0.0.12

Mozilla ≫ Thunderbird Version2.0.0.13

Mozilla ≫ Thunderbird Version2.0.0.14

Mozilla ≫ Thunderbird Version2.0.0.15

Mozilla ≫ Thunderbird Version2.0.0.16

Mozilla ≫ Thunderbird Version2.0.0.17

Mozilla ≫ Thunderbird Version2.0.0.18

Mozilla ≫ Thunderbird Version2.0_.4

Mozilla ≫ Thunderbird Version2.0_.5

Mozilla ≫ Thunderbird Version2.0_.6

Mozilla ≫ Thunderbird Version2.0_.9

Mozilla ≫ Thunderbird Version2.0_.12

Mozilla ≫ Thunderbird Version2.0_.13

Mozilla ≫ Thunderbird Version2.0_.14

Mozilla ≫ Thunderbird Version2.0_8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.8%	0.908

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.debian.org/security/2009/dsa-1830

http://secunia.com/advisories/35602

http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1

http://www.mandriva.com/security/advisories?name=MDVSA-2009:141

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275

http://secunia.com/advisories/35536

http://www.redhat.com/support/errata/RHSA-2009-1125.html

http://www.redhat.com/support/errata/RHSA-2009-1126.html

http://www.ubuntu.com/usn/usn-782-1

http://secunia.com/advisories/35561

http://secunia.com/advisories/35882

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html

http://rhn.redhat.com/errata/RHSA-2009-1096.html

http://secunia.com/advisories/35331

Vendor Advisory

http://secunia.com/advisories/35415

http://secunia.com/advisories/35428

Vendor Advisory

http://secunia.com/advisories/35431

Vendor Advisory

http://secunia.com/advisories/35439

Vendor Advisory

http://secunia.com/advisories/35440

Vendor Advisory

http://secunia.com/advisories/35468

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468

http://www.debian.org/security/2009/dsa-1820

http://www.securityfocus.com/bid/35326

Patch

http://www.securitytracker.com/id?1022397

http://www.vupen.com/english/advisories/2009/1572

Patch

Vendor Advisory

https://rhn.redhat.com/errata/RHSA-2009-1095.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html

http://osvdb.org/55157

http://www.mozilla.org/security/announce/2009/mfsa2009-29.html

Vendor Advisory

http://www.securityfocus.com/bid/35383

https://bugzilla.mozilla.org/show_bug.cgi?id=489131

https://bugzilla.redhat.com/show_bug.cgi?id=503580

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080

https://nvd.nist.gov/vuln/detail/CVE-2009-1838

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1838

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1838

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-1838