10

CVE-2009-2462

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version0.1
   Mozilla ≫ Firefox Version0.1
Mozilla ≫ Firefox Version0.2
   Mozilla ≫ Firefox Version0.2
Mozilla ≫ Firefox Version0.3
   Mozilla ≫ Firefox Version0.3
Mozilla ≫ Firefox Version0.4
   Mozilla ≫ Firefox Version0.4
Mozilla ≫ Firefox Version0.5
   Mozilla ≫ Firefox Version0.5
Mozilla ≫ Firefox Version0.6
   Mozilla ≫ Firefox Version0.6
Mozilla ≫ Firefox Version0.6.1
   Mozilla ≫ Firefox Version0.6.1
Mozilla ≫ Firefox Version0.7
   Mozilla ≫ Firefox Version0.7
Mozilla ≫ Firefox Version0.7.1
   Mozilla ≫ Firefox Version0.7.1
Mozilla ≫ Firefox Version0.8
   Mozilla ≫ Firefox Version0.8
Mozilla ≫ Firefox Version0.9
   Mozilla ≫ Firefox Version0.9
Mozilla ≫ Firefox Version0.9 Updaterc
   Mozilla ≫ Firefox Version0.9 Updaterc
Mozilla ≫ Firefox Version0.9.1
   Mozilla ≫ Firefox Version0.9.1
Mozilla ≫ Firefox Version0.9.2
   Mozilla ≫ Firefox Version0.9.2
Mozilla ≫ Firefox Version0.9.3
   Mozilla ≫ Firefox Version0.9.3
Mozilla ≫ Firefox Version0.9_rc
   Mozilla ≫ Firefox Version0.9_rc
Mozilla ≫ Firefox Version0.10
   Mozilla ≫ Firefox Version0.10
Mozilla ≫ Firefox Version0.10.1
   Mozilla ≫ Firefox Version0.10.1
Mozilla ≫ Firefox Version1.0
   Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0 Updatepreview_release
   Mozilla ≫ Firefox Version1.0 Updatepreview_release
Mozilla ≫ Firefox Version1.0.1
   Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
   Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
   Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
   Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
   Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
   Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.6 Editionlinux
   Mozilla ≫ Firefox Version1.0.6 Editionlinux
Mozilla ≫ Firefox Version1.0.7
   Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
   Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.4.1
   Mozilla ≫ Firefox Version1.4.1
Mozilla ≫ Firefox Version1.5
   Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5 Updatebeta1
   Mozilla ≫ Firefox Version1.5 Updatebeta1
Mozilla ≫ Firefox Version1.5 Updatebeta2
   Mozilla ≫ Firefox Version1.5 Updatebeta2
Mozilla ≫ Firefox Version1.5.0.1
   Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
   Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
   Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
   Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
   Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
   Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
   Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
   Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
   Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
   Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
   Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.0.12
   Mozilla ≫ Firefox Version1.5.0.12
Mozilla ≫ Firefox Version1.5.1
   Mozilla ≫ Firefox Version1.5.1
Mozilla ≫ Firefox Version1.5.2
   Mozilla ≫ Firefox Version1.5.2
Mozilla ≫ Firefox Version1.5.3
   Mozilla ≫ Firefox Version1.5.3
Mozilla ≫ Firefox Version1.5.4
   Mozilla ≫ Firefox Version1.5.4
Mozilla ≫ Firefox Version1.5.5
   Mozilla ≫ Firefox Version1.5.5
Mozilla ≫ Firefox Version1.5.6
   Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.7
   Mozilla ≫ Firefox Version1.5.7
Mozilla ≫ Firefox Version1.5.8
   Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version1.8
   Mozilla ≫ Firefox Version1.8
Mozilla ≫ Firefox Version2.0
   Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0 Updatebeta_1
   Mozilla ≫ Firefox Version2.0 Updatebeta_1
Mozilla ≫ Firefox Version2.0 Updatebeta1
   Mozilla ≫ Firefox Version2.0 Updatebeta1
Mozilla ≫ Firefox Version2.0 Updaterc2
   Mozilla ≫ Firefox Version2.0 Updaterc2
Mozilla ≫ Firefox Version2.0 Updaterc3
   Mozilla ≫ Firefox Version2.0 Updaterc3
Mozilla ≫ Firefox Version2.0.0.1
   Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
   Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
   Mozilla ≫ Firefox Version2.0.0.3
Mozilla ≫ Firefox Version2.0.0.4
   Mozilla ≫ Firefox Version2.0.0.4
Mozilla ≫ Firefox Version2.0.0.5
   Mozilla ≫ Firefox Version2.0.0.5
Mozilla ≫ Firefox Version2.0.0.6
   Mozilla ≫ Firefox Version2.0.0.6
Mozilla ≫ Firefox Version2.0.0.7
   Mozilla ≫ Firefox Version2.0.0.7
Mozilla ≫ Firefox Version2.0.0.8
   Mozilla ≫ Firefox Version2.0.0.8
Mozilla ≫ Firefox Version2.0.0.9
   Mozilla ≫ Firefox Version2.0.0.9
Mozilla ≫ Firefox Version2.0.0.10
   Mozilla ≫ Firefox Version2.0.0.10
Mozilla ≫ Firefox Version2.0.0.11
   Mozilla ≫ Firefox Version2.0.0.11
Mozilla ≫ Firefox Version2.0.0.12
   Mozilla ≫ Firefox Version2.0.0.12
Mozilla ≫ Firefox Version2.0.0.13
   Mozilla ≫ Firefox Version2.0.0.13
Mozilla ≫ Firefox Version2.0.0.14
   Mozilla ≫ Firefox Version2.0.0.14
Mozilla ≫ Firefox Version2.0.0.15
   Mozilla ≫ Firefox Version2.0.0.15
Mozilla ≫ Firefox Version2.0.0.16
   Mozilla ≫ Firefox Version2.0.0.16
Mozilla ≫ Firefox Version2.0.0.17
   Mozilla ≫ Firefox Version2.0.0.17
Mozilla ≫ Firefox Version2.0.0.18
   Mozilla ≫ Firefox Version2.0.0.18
Mozilla ≫ Firefox Version2.0.0.19
   Mozilla ≫ Firefox Version2.0.0.19
Mozilla ≫ Firefox Version2.0.0.20
   Mozilla ≫ Firefox Version2.0.0.20
Mozilla ≫ Firefox Version2.0.0.21
   Mozilla ≫ Firefox Version2.0.0.21
Mozilla ≫ Firefox Version2.0_.1
   Mozilla ≫ Firefox Version2.0_.1
Mozilla ≫ Firefox Version2.0_.4
   Mozilla ≫ Firefox Version2.0_.4
Mozilla ≫ Firefox Version2.0_.5
   Mozilla ≫ Firefox Version2.0_.5
Mozilla ≫ Firefox Version2.0_.6
   Mozilla ≫ Firefox Version2.0_.6
Mozilla ≫ Firefox Version2.0_.7
   Mozilla ≫ Firefox Version2.0_.7
Mozilla ≫ Firefox Version2.0_.9
   Mozilla ≫ Firefox Version2.0_.9
Mozilla ≫ Firefox Version2.0_.10
   Mozilla ≫ Firefox Version2.0_.10
Mozilla ≫ Firefox Version2.0_8
   Mozilla ≫ Firefox Version2.0_8
Mozilla ≫ Firefox Version3.0
   Mozilla ≫ Firefox Version3.0
Mozilla ≫ Firefox Version3.0 Updatealpha
   Mozilla ≫ Firefox Version3.0 Updatealpha
Mozilla ≫ Firefox Version3.0 Updatebeta2
   Mozilla ≫ Firefox Version3.0 Updatebeta2
Mozilla ≫ Firefox Version3.0 Updatebeta5
   Mozilla ≫ Firefox Version3.0 Updatebeta5
Mozilla ≫ Firefox Version3.0.1
   Mozilla ≫ Firefox Version3.0.1
Mozilla ≫ Firefox Version3.0.2
   Mozilla ≫ Firefox Version3.0.2
Mozilla ≫ Firefox Version3.0.3
   Mozilla ≫ Firefox Version3.0.3
Mozilla ≫ Firefox Version3.0.4
   Mozilla ≫ Firefox Version3.0.4
Mozilla ≫ Firefox Version3.0.5
   Mozilla ≫ Firefox Version3.0.5
Mozilla ≫ Firefox Version3.0.6
   Mozilla ≫ Firefox Version3.0.6
Mozilla ≫ Firefox Version3.0.7
   Mozilla ≫ Firefox Version3.0.7
Mozilla ≫ Firefox Version3.0.8
   Mozilla ≫ Firefox Version3.0.8
Mozilla ≫ Firefox Version3.0.9
   Mozilla ≫ Firefox Version3.0.9
Mozilla ≫ Firefox Version3.0.10
   Mozilla ≫ Firefox Version3.0.10
Mozilla ≫ Thunderbird Version2.0.0.0
   Mozilla ≫ Thunderbird Version2.0.0.0
Mozilla ≫ Thunderbird Version2.0.0.1
   Mozilla ≫ Thunderbird Version2.0.0.1
Mozilla ≫ Thunderbird Version2.0.0.2
   Mozilla ≫ Thunderbird Version2.0.0.2
Mozilla ≫ Thunderbird Version2.0.0.3
   Mozilla ≫ Thunderbird Version2.0.0.3
Mozilla ≫ Thunderbird Version2.0.0.4
   Mozilla ≫ Thunderbird Version2.0.0.4
Mozilla ≫ Thunderbird Version2.0.0.5
   Mozilla ≫ Thunderbird Version2.0.0.5
Mozilla ≫ Thunderbird Version2.0.0.6
   Mozilla ≫ Thunderbird Version2.0.0.6
Mozilla ≫ Thunderbird Version2.0.0.7
   Mozilla ≫ Thunderbird Version2.0.0.7
Mozilla ≫ Thunderbird Version2.0.0.8
   Mozilla ≫ Thunderbird Version2.0.0.8
Mozilla ≫ Thunderbird Version2.0.0.9
   Mozilla ≫ Thunderbird Version2.0.0.9
Mozilla ≫ Thunderbird Version2.0.0.11
   Mozilla ≫ Thunderbird Version2.0.0.11
Mozilla ≫ Thunderbird Version2.0.0.12
   Mozilla ≫ Thunderbird Version2.0.0.12
Mozilla ≫ Thunderbird Version2.0.0.13
   Mozilla ≫ Thunderbird Version2.0.0.13
Mozilla ≫ Thunderbird Version2.0.0.14
   Mozilla ≫ Thunderbird Version2.0.0.14
Mozilla ≫ Thunderbird Version2.0.0.15
   Mozilla ≫ Thunderbird Version2.0.0.15
Mozilla ≫ Thunderbird Version2.0.0.16
   Mozilla ≫ Thunderbird Version2.0.0.16
Mozilla ≫ Thunderbird Version2.0.0.17
   Mozilla ≫ Thunderbird Version2.0.0.17
Mozilla ≫ Thunderbird Version2.0.0.18
   Mozilla ≫ Thunderbird Version2.0.0.18
Mozilla ≫ Thunderbird Version2.0.0.19
   Mozilla ≫ Thunderbird Version2.0.0.19
Mozilla ≫ Thunderbird Version2.0.0.20
   Mozilla ≫ Thunderbird Version2.0.0.20
Mozilla ≫ Thunderbird Version2.0.0.21
   Mozilla ≫ Thunderbird Version2.0.0.21
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.41% 0.917
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html
http://secunia.com/advisories/35914
Vendor Advisory
http://secunia.com/advisories/36005
http://secunia.com/advisories/36145
http://www.securityfocus.com/bid/35758
Patch
http://www.vupen.com/english/advisories/2009/1972
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1
http://www.vupen.com/english/advisories/2009/2152
http://www.redhat.com/support/errata/RHSA-2010-0153.html
http://www.redhat.com/support/errata/RHSA-2010-0154.html
http://www.vupen.com/english/advisories/2010/0650
http://rhn.redhat.com/errata/RHSA-2009-1162.html
http://rhn.redhat.com/errata/RHSA-2009-1163.html
http://secunia.com/advisories/35943
Vendor Advisory
http://secunia.com/advisories/35944
Vendor Advisory
http://secunia.com/advisories/35947
Vendor Advisory
http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
Patch
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=413085
https://bugzilla.mozilla.org/show_bug.cgi?id=442227
https://bugzilla.mozilla.org/show_bug.cgi?id=445177
https://bugzilla.mozilla.org/show_bug.cgi?id=461861
https://bugzilla.mozilla.org/show_bug.cgi?id=463350
https://bugzilla.mozilla.org/show_bug.cgi?id=466763
https://bugzilla.mozilla.org/show_bug.cgi?id=468211
https://bugzilla.mozilla.org/show_bug.cgi?id=472668
https://bugzilla.mozilla.org/show_bug.cgi?id=472950
https://bugzilla.mozilla.org/show_bug.cgi?id=491134
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html