PT-2009-6657

CVE-2009-2469

·

Published

1970-01-01

·

Updated

2024-03-12

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.12
Description The issue allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation. Multiple vulnerabilities in the libmozjs1d, libmozjs1d-dbg, libmozjs-dev, and libmozillainterfaces-java packages of the Debian GNU/Linux operating system can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations For Mozilla Firefox versions prior to 3.0.12, update to version 3.0.12 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the libmozjs1d, libmozjs1d-dbg, libmozjs-dev, and libmozillainterfaces-java packages.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
DSA-1840-1
RHSA-2009:1162
RHSA-2009_1162
ROSA-SA-2024-2370
Found an issue in the description? Have something to add? Feel free to write us 👾