FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1302

This CVE name corresponds to:

Entered	Topic
2009-04-22	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-1302 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-1302
Phase	Assigned(20090416)

Description

The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/2009/mfsa2009-14.html
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=428113
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=431260
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=432114
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=454276
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=461053
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=462517
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=467881
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=477775
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=483444
DEBIAN	DSA-1797
DEBIAN	DSA-1830
FEDORA	FEDORA-2009-3875
MANDRIVA	MDVSA-2009:111
MANDRIVA	MDVSA-2009:141
REDHAT	RHSA-2009:0436
SLACKWARE	SSA:2009-178-01
SUNALERT	264308
SUSE	SUSE-SR:2009:010
UBUNTU	USN-764-1
BID	34656
OVAL	oval:org.mitre.oval:def:10106
OVAL	oval:org.mitre.oval:def:5527
OVAL	oval:org.mitre.oval:def:6070
OVAL	oval:org.mitre.oval:def:6170
OVAL	oval:org.mitre.oval:def:7030
SECTRACK	1022090
SECUNIA	34758
SECUNIA	34894
SECUNIA	34843
SECUNIA	34780
SECUNIA	35065
SECUNIA	35042
SECUNIA	35602
VUPEN	ADV-2009-1125