CVE-2009-1838

EPSS 4.8%
Veröffentlicht 12.06.2009 21:30:00
Zuletzt bearbeitet 16.06.2026 23:08:10
Erkennungen
Login

The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 39

NVD 202 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version <= 3.0.10

Mozilla ≫ Firefox Version 0.1

Mozilla ≫ Firefox Version 0.2

Mozilla ≫ Firefox Version 0.3

Mozilla ≫ Firefox Version 0.4

Mozilla ≫ Firefox Version 0.5

Mozilla ≫ Firefox Version 0.6

Mozilla ≫ Firefox Version 0.6.1

Mozilla ≫ Firefox Version 0.7

Mozilla ≫ Firefox Version 0.7.1

Mozilla ≫ Firefox Version 0.8

Mozilla ≫ Firefox Version 0.9

Mozilla ≫ Firefox Version 0.9 Update rc

Mozilla ≫ Firefox Version 0.9.1

Mozilla ≫ Firefox Version 0.9.2

Mozilla ≫ Firefox Version 0.9.3

Mozilla ≫ Firefox Version 0.9_rc

Mozilla ≫ Firefox Version 0.10

Mozilla ≫ Firefox Version 0.10.1

Mozilla ≫ Firefox Version 1.0

Mozilla ≫ Firefox Version 1.0 Update preview_release

Mozilla ≫ Firefox Version 1.0.1

Mozilla ≫ Firefox Version 1.0.2

Mozilla ≫ Firefox Version 1.0.3

Mozilla ≫ Firefox Version 1.0.4

Mozilla ≫ Firefox Version 1.0.5

Mozilla ≫ Firefox Version 1.0.6

Mozilla ≫ Firefox Version 1.0.6 Edition linux

Mozilla ≫ Firefox Version 1.0.7

Mozilla ≫ Firefox Version 1.0.8

Mozilla ≫ Firefox Version 1.4.1

Mozilla ≫ Firefox Version 1.5

Mozilla ≫ Firefox Version 1.5 Update beta1

Mozilla ≫ Firefox Version 1.5 Update beta2

Mozilla ≫ Firefox Version 1.5.0.1

Mozilla ≫ Firefox Version 1.5.0.2

Mozilla ≫ Firefox Version 1.5.0.3

Mozilla ≫ Firefox Version 1.5.0.4

Mozilla ≫ Firefox Version 1.5.0.5

Mozilla ≫ Firefox Version 1.5.0.6

Mozilla ≫ Firefox Version 1.5.0.7

Mozilla ≫ Firefox Version 1.5.0.8

Mozilla ≫ Firefox Version 1.5.0.9

Mozilla ≫ Firefox Version 1.5.0.10

Mozilla ≫ Firefox Version 1.5.0.11

Mozilla ≫ Firefox Version 1.5.0.12

Mozilla ≫ Firefox Version 1.5.1

Mozilla ≫ Firefox Version 1.5.2

Mozilla ≫ Firefox Version 1.5.3

Mozilla ≫ Firefox Version 1.5.4

Mozilla ≫ Firefox Version 1.5.5

Mozilla ≫ Firefox Version 1.5.6

Mozilla ≫ Firefox Version 1.5.7

Mozilla ≫ Firefox Version 1.5.8

Mozilla ≫ Firefox Version 1.8

Mozilla ≫ Firefox Version 2.0

Mozilla ≫ Firefox Version 2.0 Update beta_1

Mozilla ≫ Firefox Version 2.0 Update beta1

Mozilla ≫ Firefox Version 2.0 Update rc2

Mozilla ≫ Firefox Version 2.0 Update rc3

Mozilla ≫ Firefox Version 2.0.0.1

Mozilla ≫ Firefox Version 2.0.0.2

Mozilla ≫ Firefox Version 2.0.0.3

Mozilla ≫ Firefox Version 2.0.0.4

Mozilla ≫ Firefox Version 2.0.0.5

Mozilla ≫ Firefox Version 2.0.0.6

Mozilla ≫ Firefox Version 2.0.0.7

Mozilla ≫ Firefox Version 2.0.0.8

Mozilla ≫ Firefox Version 2.0.0.9

Mozilla ≫ Firefox Version 2.0.0.10

Mozilla ≫ Firefox Version 2.0.0.11

Mozilla ≫ Firefox Version 2.0.0.12

Mozilla ≫ Firefox Version 2.0.0.13

Mozilla ≫ Firefox Version 2.0.0.14

Mozilla ≫ Firefox Version 2.0.0.15

Mozilla ≫ Firefox Version 2.0.0.16

Mozilla ≫ Firefox Version 2.0.0.17

Mozilla ≫ Firefox Version 2.0.0.18

Mozilla ≫ Firefox Version 2.0.0.19

Mozilla ≫ Firefox Version 2.0.0.20

Mozilla ≫ Firefox Version 2.0.0.21

Mozilla ≫ Firefox Version 2.0_.1

Mozilla ≫ Firefox Version 2.0_.4

Mozilla ≫ Firefox Version 2.0_.5

Mozilla ≫ Firefox Version 2.0_.6

Mozilla ≫ Firefox Version 2.0_.7

Mozilla ≫ Firefox Version 2.0_.9

Mozilla ≫ Firefox Version 2.0_.10

Mozilla ≫ Firefox Version 2.0_8

Mozilla ≫ Firefox Version 3.0

Mozilla ≫ Firefox Version 3.0 Update alpha

Mozilla ≫ Firefox Version 3.0 Update beta2

Mozilla ≫ Firefox Version 3.0 Update beta5

Mozilla ≫ Firefox Version 3.0.1

Mozilla ≫ Firefox Version 3.0.2

Mozilla ≫ Firefox Version 3.0.3

Mozilla ≫ Firefox Version 3.0.4

Mozilla ≫ Firefox Version 3.0.5

Mozilla ≫ Firefox Version 3.0.6

Mozilla ≫ Firefox Version 3.0.7

Mozilla ≫ Firefox Version 3.0.8

Mozilla ≫ Firefox Version 3.0.9

Mozilla ≫ Firefox Version 3.0beta5

Mozilla ≫ Seamonkey Version <= 1.1.16

Mozilla ≫ Seamonkey Version 1.0

Mozilla ≫ Seamonkey Version 1.0 Edition alpha

Mozilla ≫ Seamonkey Version 1.0 Edition beta

Mozilla ≫ Seamonkey Version 1.0 Edition dev

Mozilla ≫ Seamonkey Version 1.0 Update alpha

Mozilla ≫ Seamonkey Version 1.0 Update beta

Mozilla ≫ Seamonkey Version 1.0.1

Mozilla ≫ Seamonkey Version 1.0.3

Mozilla ≫ Seamonkey Version 1.0.4

Mozilla ≫ Seamonkey Version 1.0.6

Mozilla ≫ Seamonkey Version 1.0.8

Mozilla ≫ Seamonkey Version 1.0.9

Mozilla ≫ Seamonkey Version 1.0.99

Mozilla ≫ Seamonkey Version 1.1

Mozilla ≫ Seamonkey Version 1.1 Update alpha

Mozilla ≫ Seamonkey Version 1.1 Update beta

Mozilla ≫ Seamonkey Version 1.1.1

Mozilla ≫ Seamonkey Version 1.1.3

Mozilla ≫ Seamonkey Version 1.1.5

Mozilla ≫ Seamonkey Version 1.1.5 Update 1.1.10

Mozilla ≫ Seamonkey Version 1.1.6

Mozilla ≫ Seamonkey Version 1.1.7

Mozilla ≫ Seamonkey Version 1.1.8

Mozilla ≫ Seamonkey Version 1.1.9

Mozilla ≫ Seamonkey Version 1.1.10

Mozilla ≫ Seamonkey Version 1.1.11

Mozilla ≫ Seamonkey Version 1.1.12

Mozilla ≫ Seamonkey Version 1.1.13

Mozilla ≫ Seamonkey Version 1.1.15

Mozilla ≫ Thunderbird Version <= 2.0.0.19

Mozilla ≫ Thunderbird Version 0.1

Mozilla ≫ Thunderbird Version 0.2

Mozilla ≫ Thunderbird Version 0.3

Mozilla ≫ Thunderbird Version 0.4

Mozilla ≫ Thunderbird Version 0.5

Mozilla ≫ Thunderbird Version 0.6

Mozilla ≫ Thunderbird Version 0.7

Mozilla ≫ Thunderbird Version 0.7.1

Mozilla ≫ Thunderbird Version 0.7.2

Mozilla ≫ Thunderbird Version 0.7.3

Mozilla ≫ Thunderbird Version 0.8

Mozilla ≫ Thunderbird Version 0.9

Mozilla ≫ Thunderbird Version 1.0

Mozilla ≫ Thunderbird Version 1.0.1

Mozilla ≫ Thunderbird Version 1.0.2

Mozilla ≫ Thunderbird Version 1.0.3

Mozilla ≫ Thunderbird Version 1.0.4

Mozilla ≫ Thunderbird Version 1.0.5

Mozilla ≫ Thunderbird Version 1.0.5 Update beta

Mozilla ≫ Thunderbird Version 1.0.6

Mozilla ≫ Thunderbird Version 1.0.7

Mozilla ≫ Thunderbird Version 1.0.8

Mozilla ≫ Thunderbird Version 1.5

Mozilla ≫ Thunderbird Version 1.5 Update beta2

Mozilla ≫ Thunderbird Version 1.5.0.1

Mozilla ≫ Thunderbird Version 1.5.0.2

Mozilla ≫ Thunderbird Version 1.5.0.3

Mozilla ≫ Thunderbird Version 1.5.0.4

Mozilla ≫ Thunderbird Version 1.5.0.5

Mozilla ≫ Thunderbird Version 1.5.0.6

Mozilla ≫ Thunderbird Version 1.5.0.7

Mozilla ≫ Thunderbird Version 1.5.0.8

Mozilla ≫ Thunderbird Version 1.5.0.9

Mozilla ≫ Thunderbird Version 1.5.0.10

Mozilla ≫ Thunderbird Version 1.5.0.11

Mozilla ≫ Thunderbird Version 1.5.0.12

Mozilla ≫ Thunderbird Version 1.5.0.13

Mozilla ≫ Thunderbird Version 1.5.0.14

Mozilla ≫ Thunderbird Version 1.5.1

Mozilla ≫ Thunderbird Version 1.5.2

Mozilla ≫ Thunderbird Version 1.7.1

Mozilla ≫ Thunderbird Version 1.7.3

Mozilla ≫ Thunderbird Version 2.0.0.0

Mozilla ≫ Thunderbird Version 2.0.0.1

Mozilla ≫ Thunderbird Version 2.0.0.2

Mozilla ≫ Thunderbird Version 2.0.0.3

Mozilla ≫ Thunderbird Version 2.0.0.4

Mozilla ≫ Thunderbird Version 2.0.0.5

Mozilla ≫ Thunderbird Version 2.0.0.6

Mozilla ≫ Thunderbird Version 2.0.0.7

Mozilla ≫ Thunderbird Version 2.0.0.8

Mozilla ≫ Thunderbird Version 2.0.0.9

Mozilla ≫ Thunderbird Version 2.0.0.11

Mozilla ≫ Thunderbird Version 2.0.0.12

Mozilla ≫ Thunderbird Version 2.0.0.13

Mozilla ≫ Thunderbird Version 2.0.0.14

Mozilla ≫ Thunderbird Version 2.0.0.15

Mozilla ≫ Thunderbird Version 2.0.0.16

Mozilla ≫ Thunderbird Version 2.0.0.17

Mozilla ≫ Thunderbird Version 2.0.0.18

Mozilla ≫ Thunderbird Version 2.0_.4

Mozilla ≫ Thunderbird Version 2.0_.5

Mozilla ≫ Thunderbird Version 2.0_.6

Mozilla ≫ Thunderbird Version 2.0_.9

Mozilla ≫ Thunderbird Version 2.0_.12

Mozilla ≫ Thunderbird Version 2.0_.13

Mozilla ≫ Thunderbird Version 2.0_.14

Mozilla ≫ Thunderbird Version 2.0_8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.8%	0.908

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.debian.org/security/2009/dsa-1830

http://secunia.com/advisories/35602

http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1

http://www.mandriva.com/security/advisories?name=MDVSA-2009:141

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275

http://secunia.com/advisories/35536

http://www.redhat.com/support/errata/RHSA-2009-1125.html

http://www.redhat.com/support/errata/RHSA-2009-1126.html

http://www.ubuntu.com/usn/usn-782-1

http://secunia.com/advisories/35561

http://secunia.com/advisories/35882

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html

http://rhn.redhat.com/errata/RHSA-2009-1096.html

http://secunia.com/advisories/35331

Vendor Advisory

http://secunia.com/advisories/35415

http://secunia.com/advisories/35428

Vendor Advisory

http://secunia.com/advisories/35431

Vendor Advisory

http://secunia.com/advisories/35439

Vendor Advisory

http://secunia.com/advisories/35440

Vendor Advisory

http://secunia.com/advisories/35468

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468

http://www.debian.org/security/2009/dsa-1820

http://www.securityfocus.com/bid/35326

Patch

http://www.securitytracker.com/id?1022397

http://www.vupen.com/english/advisories/2009/1572

Patch

Vendor Advisory

https://rhn.redhat.com/errata/RHSA-2009-1095.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html

http://osvdb.org/55157

http://www.mozilla.org/security/announce/2009/mfsa2009-29.html

Vendor Advisory

http://www.securityfocus.com/bid/35383

https://bugzilla.mozilla.org/show_bug.cgi?id=489131

https://bugzilla.redhat.com/show_bug.cgi?id=503580

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080

https://nvd.nist.gov/vuln/detail/CVE-2009-1838

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1838

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1838

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-1838