CVE-2009-0352
published 2009-02-04CVE-2009-0352: Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to…
PriorityP336critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
4.33%
90.1th percentile
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
Affected
66 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | seamonkey | <= 1.1.13 | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f6h6-jfpf-wgvv: Multiple unspecified vulnerabilities in Mozilla Firefox 3
ghsa_unreviewed·2022-05-02
CVE-2009-0352 [HIGH] GHSA-f6h6-jfpf-wgvv: Multiple unspecified vulnerabilities in Mozilla Firefox 3
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2009-03-19·CVSS 10.0
CVE-2009-0352 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Thunderbird vulnerabilities
Several flaws were discovered in the browser engine. If Javascript were
enabled, an attacker could exploit these flaws to crash Thunderbird and
possibly execute arbitrary code with user privileges. (CVE-2009-0352)
Jesse Ruderman and Gary Kwong discovered flaws in the browser engine. If a
user had Javascript enabled, these problems could allow a remote attacker to
cause a denial of service or possibly execute arbitrary code with the
privileges of the user invoking the program. (CVE-2009-0772, CVE-2009-0774)
Georgi Guninski discovered a flaw when Thunderbird performed a cross-domain
redirect. If a user had Javascript enabled, an attacker could bypass the
same-origin policy in Thunderbird by utilizing nsIRDFService an
Ubuntu
Firefox and Xulrunner vulnerabilities
vendor_ubuntu·2009-02-10·CVSS 10.0
CVE-2009-0352 [CRITICAL] Firefox and Xulrunner vulnerabilities
Title: Firefox and Xulrunner vulnerabilities
Summary: Firefox and Xulrunner vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2009-0352, CVE-2009-0353)
A flaw was discovered in the JavaScript engine. An attacker could bypass the
same-origin policy in Firefox by utilizing a chrome XBL method and execute
arbitrary JavaScript within the context of another website. (CVE-2009-0354)
A flaw was discovered in the browser engine when restoring closed tabs. If a
user were tricked into restoring a tab to a malicious website with form input
controls, an attacker could steal local files on the user's system.
(CVE-2009-0355)
Wladimir Palant discovered that Fi
Red Hat
Firefox layout crashes with evidence of memory corruption
vendor_redhat·2009-02-03·CVSS 10.0
CVE-2009-0352 [CRITICAL] Firefox layout crashes with evidence of memory corruption
Firefox layout crashes with evidence of memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0256.htmlhttp://secunia.com/advisories/33799http://secunia.com/advisories/33802http://secunia.com/advisories/33808http://secunia.com/advisories/33809http://secunia.com/advisories/33816http://secunia.com/advisories/33831http://secunia.com/advisories/33841http://secunia.com/advisories/33846http://secunia.com/advisories/33869http://secunia.com/advisories/34324http://secunia.com/advisories/34387http://secunia.com/advisories/34417http://secunia.com/advisories/34462http://secunia.com/advisories/34464http://secunia.com/advisories/34527http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952http://support.avaya.com/elmodocs2/security/ASA-2009-040.htmhttp://www.debian.org/security/2009/dsa-1830http://www.mandriva.com/security/advisories?name=MDVSA-2009:044http://www.mandriva.com/security/advisories?name=MDVSA-2009:083http://www.mozilla.org/security/announce/2009/mfsa2009-01.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0257.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0258.htmlhttp://www.securityfocus.com/bid/33598http://www.securitytracker.com/id?1021663http://www.ubuntu.com/usn/usn-717-1http://www.vupen.com/english/advisories/2009/0313https://bugzilla.mozilla.org/show_bug.cgi?id=331088https://bugzilla.mozilla.org/show_bug.cgi?id=401042https://bugzilla.mozilla.org/show_bug.cgi?id=416461https://bugzilla.mozilla.org/show_bug.cgi?id=420697https://bugzilla.mozilla.org/show_bug.cgi?id=421839https://bugzilla.mozilla.org/show_bug.cgi?id=422283https://bugzilla.mozilla.org/show_bug.cgi?id=422301https://bugzilla.mozilla.org/show_bug.cgi?id=431705https://bugzilla.mozilla.org/show_bug.cgi?id=437142https://bugzilla.mozilla.org/show_bug.cgi?id=449006https://bugzilla.mozilla.org/show_bug.cgi?id=461027https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699https://usn.ubuntu.com/741-1/https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0256.htmlhttp://secunia.com/advisories/33799http://secunia.com/advisories/33802http://secunia.com/advisories/33808http://secunia.com/advisories/33809http://secunia.com/advisories/33816http://secunia.com/advisories/33831http://secunia.com/advisories/33841http://secunia.com/advisories/33846http://secunia.com/advisories/33869http://secunia.com/advisories/34324http://secunia.com/advisories/34387http://secunia.com/advisories/34417http://secunia.com/advisories/34462http://secunia.com/advisories/34464http://secunia.com/advisories/34527http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952http://support.avaya.com/elmodocs2/security/ASA-2009-040.htmhttp://www.debian.org/security/2009/dsa-1830http://www.mandriva.com/security/advisories?name=MDVSA-2009:044http://www.mandriva.com/security/advisories?name=MDVSA-2009:083http://www.mozilla.org/security/announce/2009/mfsa2009-01.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0257.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0258.htmlhttp://www.securityfocus.com/bid/33598http://www.securitytracker.com/id?1021663http://www.ubuntu.com/usn/usn-717-1http://www.vupen.com/english/advisories/2009/0313https://bugzilla.mozilla.org/show_bug.cgi?id=331088https://bugzilla.mozilla.org/show_bug.cgi?id=401042https://bugzilla.mozilla.org/show_bug.cgi?id=416461https://bugzilla.mozilla.org/show_bug.cgi?id=420697https://bugzilla.mozilla.org/show_bug.cgi?id=421839https://bugzilla.mozilla.org/show_bug.cgi?id=422283https://bugzilla.mozilla.org/show_bug.cgi?id=422301https://bugzilla.mozilla.org/show_bug.cgi?id=431705https://bugzilla.mozilla.org/show_bug.cgi?id=437142https://bugzilla.mozilla.org/show_bug.cgi?id=449006https://bugzilla.mozilla.org/show_bug.cgi?id=461027https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10699https://usn.ubuntu.com/741-1/https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html
2009-02-04
Published