Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2464 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800
lve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://secunia.com/advisories/35943 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.mozilla.org/security/announce/2009/mfsa2009-34.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9594 - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152
org.mitre.oval%3Adef%3A9594 - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - https://bugzilla.mozilla.org/show_bug.cgi?id=441785 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972
CVE ID: CVE-2009-2465 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:15.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetke
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=482578 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://secunia.com/advisories/35943 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.mozilla.org/security/announce/2009/mfsa2009-34.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10402 - http://www.securityfo
l - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10402 - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - https://bugzilla.mozilla.org/show_bug.cgi?id=489050
CVE ID: CVE-2009-2466 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
sun.com/search/document.do?assetkey=1-26-265068-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://www.vupen.com/english/advisories/2010/0650 - https://bugzilla.mozilla.org/show_bug.cgi?id=493281 - http://secunia.com/advisories/35943 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.h
tp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.mozilla.org/security/announce/2009/mfsa2009-34.html - https://bugzilla.mozilla.org/show_bug.cgi?id=465980 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - https://bugzilla.mozilla.org/show_bug.cgi?id=454704 - http://secunia.com/advisories/36005 - http://rhn.redhat.com/errata/RHSA-2009-1163.html - http://secunia.com/advisories/35947 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=
tp://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=494445 - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972
CVE ID: CVE-2009-2467 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - h
package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10473 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.securityfocus.com/bid/35758 - http://www.mozilla.org/security/announce/2009/mfsa2009-35.html - http://secunia.com/advisories/36005 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/ad
opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - https://bugzilla.mozilla.org/show_bug.cgi?id=493601
CVE ID: CVE-2009-2468 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - https://bugzilla.mozil
ntainer: References: - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=480134 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.securityfocus.com/bid/35758 - http://www.securitytracker.com/id?1022717 - http://www.mozilla.org/security/announce/2009/mfsa2009-36.html - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://support.apple.com/kb/HT3733
CVE ID: CVE-2009-2469 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://www.mozilla.org/security/announce/2009
ces: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-37.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030 - http://rhn.redhat.com/errata/RHSA-2009-1162.html - https://bugzilla.mozilla.org/show_bug.cgi?id=488995 - http://www.securityfocus.com/bid/35758 - http://www.vu
1162.html - https://bugzilla.mozilla.org/show_bug.cgi?id=488995 - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972
CVE ID: CVE-2009-2470 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:52:14.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2142 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - https://bugzilla.mozilla.org/show_bug.cgi?id=459524 - http://www.securitytracker.com/id?1022665 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - http://www.
p://www.securitytracker.com/id?1022665 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - http://www.vupen.com/english/advisories/2010/0650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52252 - http://www.securityfocus.com/bid/35925 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://secunia.com/advisories/36126 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197 - http://www.mozilla.org/security/announce/2009/mfsa2009-38.html
CVE ID: CVE-2009-2471 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2009/mfsa2009-39.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://li
announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.securityfocus.com/bid/35758 - http://secunia.com/advisories/36005 - https://bugzilla.mozilla.org/show_bug.cgi?id=460882 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10572
CVE ID: CVE-2009-2472 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - https://www.redhat.com/archives/fedo
6-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://www.mozilla.org/security/announce/2009/mfsa2009-40.html - http://secunia.com/advisories/35944 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=481434 - http://rhn.redhat.com/errata/RHSA-2009-1162.html - https://bugzilla.mozilla.org/show_bug.cgi?id=479288 - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - https://oval.cisecurity.or
8 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9497 - https://bugzilla.mozilla.org/show_bug.cgi?id=497102 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972
CVE ID: CVE-2009-2473 State: PUBLISHED Published: 2009-08-21T17:00:00 Last Updated: 2024-08-07T05:52:14.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
rmail/neon/2009-August/001044.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9461 - http://support.apple.com/kb/HT4435 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://www.vupen.com/english/advisories/2009/2341 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:221 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://rhn.redhat.com/errata/RHSA-2013-0131.html - http://secunia.com/advisories/36371 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html - http
nce/2009-August/msg00945.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52633 - http://lists.manyfish.co.uk/pipermail/neon/2009-August/001045.html
CVE ID: CVE-2009-2474 State: PUBLISHED Published: 2009-08-21T17:00:00 Last Updated: 2024-08-07T05:52:14.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html - http://lists.manyfish.co.uk/pipermail/neon
ences: - http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html - http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2009/2341 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:221 - http://www.securityfocus.com/bid/36079 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/36371 - http://www.ubuntu.com/usn/usn-835-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html - https://www.redhat.com/arc
n-835-1 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html - http://secunia.com/advisories/36799
CVE ID: CVE-2009-2475 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T05:52:14.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Syn
eio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2009-1200.html - https://bugzilla.redhat.com/show_bug.cgi?id=513215 - https://rhn.redhat.com/errata/RHSA-2009-1199.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://secunia.com/advisories/36199 - http://sunsolve.sun
09/2543 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://secunia.com/advisories/36199 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - http://java.sun.com/javase/6/webnotes/6u15.html - http://secunia.com/advisories/36180 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://java.sun.com/
August/msg00325.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10221 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://secunia.com/advisories/37386
CVE ID: CVE-2009-2476 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T05:52:15.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=513220 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - http://secunia.com/advisories/36162 - http://www.vupen.c
id=513220 - https://rhn.redhat.com/errata/RHSA-2009-1200.html - http://secunia.com/advisories/36162 - http://www.vupen.com/english/advisories/2009/2543 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125139-16-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10381 - http://java.sun.com/javase/6/webnotes/6u15.html - http://secunia.com/advisories/36180 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-anno
secunia.com/advisories/36180 - http://secunia.com/advisories/36176 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - https://rhn.redhat.com/errata/RHSA-2009-1201.html - http://secunia.com/advisories/37386
CVE ID: CVE-2009-2477 State: PUBLISHED Published: 2009-07-15T15:00:00 Last Updated: 2024-08-07T05:52:14.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=503286 - http://www.kb.cert.org/vuls/id/443060 - https://www.redhat.com/archives/fed
ugzilla.mozilla.org/show_bug.cgi?id=503286 - http://www.kb.cert.org/vuls/id/443060 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html - https://www.exploit-db.com/exploits/40936/ - http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html - http://isc.sans.org/diary.html?storyid=6796 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1 - http://www.securityfocus.com/bid/35660 - http://www.exploit-db.com/exploits/9181 - http://secunia.com/advisories/35798 - http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/ - http://www.vupen.com/english/advisories/2009/1868 - http://www.expl
4/critical-javascript-vulnerability-in-firefox-35/ - http://www.vupen.com/english/advisories/2009/1868 - http://www.exploit-db.com/exploits/9137 - http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761 - http://www.mozilla.org/security/announce/2009/mfsa2009-41.html