FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-2463

This CVE name corresponds to:

Entered Topic
2010-03-19 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2009-2463
Phase Assigned(20090715)

Description

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=492779
CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-07.html
FEDORA FEDORA-2009-7961
REDHAT RHSA-2009:1162
REDHAT RHSA-2009:1163
REDHAT RHSA-2010:0153
REDHAT RHSA-2010:0154
SUNALERT 265068
SUNALERT 1020800
SUSE SUSE-SA:2009:042
SUSE SUSE-SA:2009:039
SUSE SUSE-SR:2010:013
UBUNTU USN-915-1
BID 35758
OVAL oval:org.mitre.oval:def:10369
SECUNIA 35914
SECUNIA 35943
SECUNIA 35944
SECUNIA 35947
SECUNIA 36145
SECUNIA 36005
SECUNIA 39001
SECUNIA 38977
VUPEN ADV-2009-1972
VUPEN ADV-2009-2152
VUPEN ADV-2010-0648
VUPEN ADV-2010-0650