Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1304 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7516 - http://www.mandriva.
es: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7516 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://secunia.com/advisories/34758 - https://bugzilla.mozilla.org/show_bug.cgi?id=475971 - http://secunia.com/advisories/35602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9535 - https://oval.cisecurity.org/reposi
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9535 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5319 - https://bugzilla.mozilla.org/show_bug.cgi?id=461158 - http://secunia.com/advisories/35065 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A54
n.org/security/2009/dsa-1797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5480 - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6015 - http://www.mozilla.org/security/announce/2009/mfsa2009-14.html - http://www.securitytracker.com/id?1022090
CVE ID: CVE-2009-1305 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10110 - http://www.mandriva.com/security/advisories?name=MDVSA-20
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10110 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6090 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://secunia.com/advisories/34758 - https://bugzilla.mozilla.org/show_bug.cgi?id=476049 - http://secunia.com/advisories/35536 - http://secunia.com/advisories/35602 - http://www.redhat.com/support/err
d=476049 - http://secunia.com/advisories/35536 - http://secunia.com/advisories/35602 - http://www.redhat.com/support/errata/RHSA-2009-1125.html - http://secunia.com/advisories/34844 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6248 - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6232 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6921 - http://lists.opensuse.org/opensuse-security-announce/2009-05
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6921 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-14.html - http://www.securitytracker.com/id?1022090
CVE ID: CVE-2009-1306 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6021 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6710 - http://www.vupen.com/english/advisories/2009/1125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10150 - http://secunia.com/advisories/34758 - http://secunia.com/advisories/35536 - https://bugzilla.mozilla.org/show_bug.cgi?id=474536 - http://www.redhat.com/support/errata/RHSA-2009-1125.html -
5536 - https://bugzilla.mozilla.org/show_bug.cgi?id=474536 - http://www.redhat.com/support/errata/RHSA-2009-1125.html - http://www.mozilla.org/security/announce/2009/mfsa2009-16.html - http://secunia.com/advisories/34844 - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35065 - http://www.securitytracker.com/id?1022095 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6194 - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://se
3Aorg.mitre.oval%3Adef%3A6194 - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6312
CVE ID: CVE-2009-1307 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/an
nvolving a jar: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2009/mfsa2009-17.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6154 - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/34758 - http://secunia.com/advisorie
4275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/34758 - http://secunia.com/advisories/35536 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10972 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7008 - http://secunia.com/advisories/35602 - http://www.redhat.com/support/errata/RHSA-2009-1125.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html - http://secunia.com/advisories/34844 - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35065 - http://www.securitytracker.com/id?1022093 - https://www.redhat.com/archives/fedora-packa
/secunia.com/advisories/35065 - http://www.securitytracker.com/id?1022093 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html - http://secunia.com/advisories/35882 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6266 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5933 - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/se
visories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://secunia.com/advisories/35561 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=481342
CVE ID: CVE-2009-1308 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories
9:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://secunia.com/advisories/34758 - http://secunia.com/advisories/35536 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6185 - https://bugzilla.mozilla.org/show_bug.cgi?id=481558 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7285 - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6173 - http://www.mozilla.org/security
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6173 - http://www.mozilla.org/security/announce/2009/mfsa2009-18.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10428 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.theregister.co.uk/2009/03/08/ebay_scam_wiz
-1797 - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.theregister.co.uk/2009/03/08/ebay_scam_wizardy/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6296 - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.securitytracker.com/id?1022097
CVE ID: CVE-2009-1309 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022094 - http://www.mandriva.com/security/advisorie
Program Container: References: - http://www.securitytracker.com/id?1022094 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://secunia.com/advisories/34758 - http://secunia.com/advisories/35536 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5265 - http://www.redhat.com/support/errata/RHSA-2009-1125.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6831 - http://secunia.com/advisories/34844 - http://www.mozilla.org
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6831 - http://secunia.com/advisories/34844 - http://www.mozilla.org/security/announce/2009/mfsa2009-19.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6139 - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35065 - https://bugzilla.mozilla.org/show_bug.cgi?id=478433 - https://usn.ubuntu.com/764-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5591 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - https://oval.cisecurity.org/repository/searc
ttp://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9494 - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://secunia.com/advisories/34780 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=482206
CVE ID: CVE-2009-1310 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6242 - https://www.redhat.com/archives/fedora-package-announce/2009-April/ms
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A6242 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://secunia.com/advisories/34758 - http://www.debian.org/security/2009/dsa-1886 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11520 - https://bugzilla.mozilla.org/show_bug.cgi?id=483086 - http://secunia.com/advisories/35065 - http://www.mozilla.org/security/announce/2009/mfsa2009-20.html - https://usn.ubuntu.com/764-1/ - http://secunia.com/advisories/36757 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000
com/764-1/ - http://secunia.com/advisories/36757 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.securitytracker.com/id?1022097
CVE ID: CVE-2009-1311 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7235 - https://www.
SA-2009:111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7235 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - http://secunia.com/advisories/34758 - https://bugzilla.mozilla.org/show_bug.cgi?id=471962 - http://www.mozilla.org/security/announce/2009/mfsa2009-21.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6200 - http://secunia.com/advisories/34844 - http://secunia.com/advisories/35065 - https://ww
l%3Aorg.mitre.oval%3Adef%3A6200 - http://secunia.com/advisories/34844 - http://secunia.com/advisories/35065 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html - http://secunia.com/advisories/35882 - https://usn.ubuntu.com/764-1/ - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/35042 - http://www.securityfocus.com/bid/34656 - http://secunia.com/advisories/34843 - http://www.debian.org/security/2009/dsa-1797 - http://secunia.com/advisories/35561 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://ww
p?l=slackware-security&y=2009&m=slackware-security.425408 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10939 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6222 - http://www.securitytracker.com/id?1022097
CVE ID: CVE-2009-1312 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:04:49.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - h
nalyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html - http://secunia.com/advisories/34894 - http://www.vupen.com/english/advisories/2009/1125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9818 - http://secunia.com/advisories/34758 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6131 - http://www.mozilla.org/security/announce/2009/mfsa2009-22.html - http://websecurity.com.ua/3386/ - http://www.securitytracker.com/id?1022096 - https://oval.cisecurity.org/repository/
- http://websecurity.com.ua/3386/ - http://www.securitytracker.com/id?1022096 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6064 - http://secunia.com/advisories/34844 - http://ha.ckers.org/blog/20070309/firefox-header-redirection-javascript-execution/ - https://bugzilla.mozilla.org/show_bug.cgi?id=475636 - http://websecurity.com.ua/3275/ - http://secunia.com/advisories/35065 - http://www.securityfocus.com/archive/1/504723/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6731 - https://usn.ubuntu.com/764-1/ - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www
https://usn.ubuntu.com/764-1/ - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.securityfocus.com/bid/34656 - http://www.securityfocus.com/archive/1/504718/100/0/threaded - http://secunia.com/advisories/34843 - http://rhn.redhat.com/errata/RHSA-2009-0437.html - http://www.redhat.com/support/errata/RHSA-2009-0436.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1
CVE ID: CVE-2009-1313 State: PUBLISHED Published: 2009-04-30T21:00:00 Last Updated: 2024-08-07T05:04:49.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 - http://www.vupen.com/english/advisories/2009/1180 - http://secunia.com/ad