Buffer overflow in Mozilla Firefox
CVE-2009-2466
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.
Vulnerability class: Buffer Overflow
EPSS: 0.066 (93.2th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefox
- Mozilla Thunderbird
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, x_refsource_SUNALERT, Broken Link)
- secalert@redhat.com (Broken Link, signature, x_refsource_OVAL, vdb-entry)
- secalert@redhat.com (vendor-advisory, x_refsource_SUNALERT, Broken Link)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Broken Link)
- secalert@redhat.com (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- secalert@redhat.com (Patch, x_refsource_SECUNIA, Not Applicable, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (vdb-entry, Broken Link, x_refsource_VUPEN)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Not Applicable, Vendor Advisory, third-party-advisory)