FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1571

This CVE name corresponds to:

Entered	Topic
2010-02-18	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-1571 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-1571
Phase	Assigned(20090506)

Description

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

References

Source	Reference
BUGTRAQ	20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability
MISC	http://secunia.com/secunia_research/2009-45/
CONFIRM	http://www.mozilla.org/security/announce/2010/mfsa2010-03.html
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=526500
DEBIAN	DSA-1999
FEDORA	FEDORA-2010-1727
FEDORA	FEDORA-2010-1932
FEDORA	FEDORA-2010-1936
FEDORA	FEDORA-2010-3230
FEDORA	FEDORA-2010-3267
MANDRIVA	MDVSA-2010:042
MANDRIVA	MDVSA-2010:051
REDHAT	RHSA-2010:0112
REDHAT	RHSA-2010:0113
REDHAT	RHSA-2010:0153
REDHAT	RHSA-2010:0154
SUSE	SUSE-SA:2010:015
UBUNTU	USN-895-1
UBUNTU	USN-896-1
OVAL	oval:org.mitre.oval:def:11227
OVAL	oval:org.mitre.oval:def:8615
SECUNIA	37242
SECUNIA	38770
SECUNIA	38772
SECUNIA	38847
VUPEN	ADV-2010-0405
VUPEN	ADV-2010-0650
XF	mozilla-htmlparser-code-exec(56361)