What is CVE-2009-2477?

CVE-2009-2477 is a vulnerability in N/a. Published 2009-07-15.

Is CVE-2009-2477 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninit…

EPSS: 0.833 (99.3th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

bugzilla.mozilla.org/show_bug.cgi (x_refsource_CONFIRM)
VU#443060 (x_refsource_CERT-VN, third-party-advisory)
FEDORA-2009-7898 (x_refsource_FEDORA, vendor-advisory)
40936 (exploit, x_refsource_EXPLOIT-DB)
voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.ht… (x_refsource_MISC)
isc.sans.org/diary.html (x_refsource_MISC)
266148 (vendor-advisory, x_refsource_SUNALERT)
35660 (vdb-entry, x_refsource_BID)
9181 (exploit, x_refsource_EXPLOIT-DB)
35798 (x_refsource_SECUNIA, third-party-advisory)

Frequently asked questions

What is CVE-2009-2477?: CVE-2009-2477 is a vulnerability in N/a. Published 2009-07-15.
Is CVE-2009-2477 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.