PT-2009-5059

CVE-2009-2664

Published

2009-07-22

Updated

2017-09-19

Description by

CVSS 2.0

5.0

Medium

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.12

Description The issue is related to a "memory safety bug" in the JavaScript engine, specifically in the js watch set function. This bug can be exploited by remote attackers using a crafted .js file, potentially leading to a denial of service or possibly the execution of arbitrary code.

Recommendations For versions prior to 3.0.12, update to version 3.0.12 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Bob Clary

Vendors

Affected products

Weakness enumeration

CWE-399

Related identifiers

CVE-2009-2664