PT-2009-5688

CVE-2009-3382

Published

2009-10-27

Updated

2017-09-19

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.0.x through 3.0.14

Description The issue is related to the handling of first-letter frames in the browser engine. Remote attackers can cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unspecified vectors.

Recommendations For Mozilla Firefox versions 3.0.x through 3.0.14, update to version 3.0.15 or later to resolve the issue.

Exploitability

Exploit

Fix

Researchers

Carsten Book

Tomcat

Vendors

Affected products

Related identifiers

CVE-2009-3382

DSA-1922-1