FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1304

This CVE name corresponds to:

Entered	Topic
2009-04-22	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-1304 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-1304
Phase	Assigned(20090416)

Description

The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/2009/mfsa2009-14.html
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=461158
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=475971
DEBIAN	DSA-1797
FEDORA	FEDORA-2009-3875
MANDRIVA	MDVSA-2009:111
MANDRIVA	MDVSA-2009:141
REDHAT	RHSA-2009:0436
SLACKWARE	SSA:2009-178-01
SUNALERT	264308
SUSE	SUSE-SR:2009:010
UBUNTU	USN-764-1
BID	34656
OVAL	oval:org.mitre.oval:def:5319
OVAL	oval:org.mitre.oval:def:5480
OVAL	oval:org.mitre.oval:def:6015
OVAL	oval:org.mitre.oval:def:7516
OVAL	oval:org.mitre.oval:def:9535
SECTRACK	1022090
SECUNIA	34758
SECUNIA	34894
SECUNIA	34843
SECUNIA	34780
SECUNIA	35065
SECUNIA	35042
SECUNIA	35602
VUPEN	ADV-2009-1125