FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1305

This CVE name corresponds to:

Entered Topic
2009-04-22 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2009-1305
Phase Assigned(20090416)

Description

The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2009/mfsa2009-14.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=476049
DEBIAN DSA-1797
FEDORA FEDORA-2009-3875
MANDRIVA MDVSA-2009:111
MANDRIVA MDVSA-2009:141
REDHAT RHSA-2009:0436
REDHAT RHSA-2009:0437
REDHAT RHSA-2009:1125
REDHAT RHSA-2009:1126
SLACKWARE SSA:2009-178-01
SUNALERT 264308
SUSE SUSE-SR:2009:010
UBUNTU USN-764-1
UBUNTU USN-782-1
BID 34656
OVAL oval:org.mitre.oval:def:10110
OVAL oval:org.mitre.oval:def:6090
OVAL oval:org.mitre.oval:def:6232
OVAL oval:org.mitre.oval:def:6248
OVAL oval:org.mitre.oval:def:6921
SECTRACK 1022090
SECUNIA 34758
SECUNIA 34894
SECUNIA 34843
SECUNIA 34844
SECUNIA 34780
SECUNIA 35065
SECUNIA 35042
SECUNIA 35536
SECUNIA 35602
VUPEN ADV-2009-1125