FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1303

This CVE name corresponds to:

Entered Topic
2009-04-22 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2009-1303
Phase Assigned(20090416)

Description

The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2009/mfsa2009-14.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=453736
DEBIAN DSA-1797
DEBIAN DSA-1830
FEDORA FEDORA-2009-3875
MANDRIVA MDVSA-2009:111
MANDRIVA MDVSA-2009:141
REDHAT RHSA-2009:0436
REDHAT RHSA-2009:0437
REDHAT RHSA-2009:1125
REDHAT RHSA-2009:1126
SLACKWARE SSA:2009-178-01
SUNALERT 264308
SUSE SUSE-SR:2009:010
UBUNTU USN-764-1
UBUNTU USN-782-1
BID 34656
OVAL oval:org.mitre.oval:def:5810
OVAL oval:org.mitre.oval:def:5992
OVAL oval:org.mitre.oval:def:6151
OVAL oval:org.mitre.oval:def:6646
OVAL oval:org.mitre.oval:def:9455
SECTRACK 1022090
SECUNIA 34758
SECUNIA 34894
SECUNIA 34843
SECUNIA 34844
SECUNIA 34780
SECUNIA 35065
SECUNIA 35042
SECUNIA 35536
SECUNIA 35602
VUPEN ADV-2009-1125