CVE-2009-0775

Mozilla Firefox <3.0.7, Thunderbird <2.0.0.21, SeaMonkey <1.1.15 - RCE

Title source: llm

Description

Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.

References (27)

Core 27

Core References

Vendor Advisory x_refsource_confirm

http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2009-0315.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/0632

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1021796

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2009/dsa-1751

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2009-0325.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2009-0258.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34140

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34272

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34417

Various Sources x_refsource_confirm

http://www.mozilla.org/security/announce/2009/mfsa2009-08.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34145

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=474456

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34137

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34324

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2009:075

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/33990

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34383

Scores

EPSS 0.0471

EPSS Percentile 90.8%

Details

CWE

CWE-399

Status published

Products (50)

mozilla/firefox 1.0

mozilla/firefox 1.0.1

mozilla/firefox 1.0.2

mozilla/firefox 1.0.3

mozilla/firefox 1.0.4

mozilla/firefox 1.0.5

mozilla/firefox 1.0.6

mozilla/firefox 1.0.7

mozilla/firefox 1.0.8

mozilla/firefox 1.5

... and 40 more

Published Mar 05, 2009

Tracked Since Feb 18, 2026