CVE-2009-0773

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.7 Thunderbird versions prior to 2.0.0.21 SeaMonkey version 1.1.15

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. This can be achieved through several vectors, including the splice of an array with non-set elements, which causes memory corruption due to an incorrect argument passed to the ResizeSlots function. Other vectors involve js DecompileValueGenerator, jsopcode.cpp, defineSetter, and watch, leading to assertion failures or segmentation faults. Additionally, vectors related to gczeal, defineSetter, and watch can cause a hang.

Recommendations For Mozilla Firefox versions prior to 3.0.7, update to version 3.0.7 or later. For Thunderbird versions prior to 2.0.0.21, update to version 2.0.0.21 or later. For SeaMonkey version 1.1.15, update to a version later than 1.1.15.