34851Third-party advisory
http://secunia.com/advisories/34851 CVE-2009-1313
Mozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory Corruption
Record summary
CVE-2009-1313 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory CorruptionExploitDB exploitby Marc GueuryNot analyzed1 file
References
Showing 12 of 1934866Third-party advisory
http://secunia.com/advisories/34866 34910Third-party advisory
http://secunia.com/advisories/34910 34919Third-party advisory
http://secunia.com/advisories/34919 1022126vdb entry
http://securitytracker.com/id?1022126 1022127vdb entry
http://securitytracker.com/id?1022127 SSA:2009-118-01Vendor advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967 MDVSA-2009:111Vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 mozilla.orgConfirmation
http://www.mozilla.org/security/announce/2009/mfsa2009-23.html 34743vdb entry
http://www.securityfocus.com/bid/34743 USN-765-1Vendor advisory
http://www.ubuntu.com/usn/USN-765-1 ADV-2009-1180vdb entry
http://www.vupen.com/english/advisories/2009/1180