CVEvulnerability
CVE-2009-0775
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.
Affected configurations
• mozilla firefox (<= 3.0.6)
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 2.0.0.10
• mozilla firefox 2.0.0.11
• mozilla firefox 2.0.0.12
• mozilla firefox 2.0.0.13
• mozilla firefox 2.0.0.14
• mozilla firefox 2.0.0.15
• mozilla firefox 2.0.0.16
• mozilla firefox 2.0.0.17
• mozilla firefox 2.0.0.18
• mozilla firefox 2.0.0.19
• mozilla firefox 2.0.0.20
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
• mozilla seamonkey (<= 1.1.14)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
… and 26 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/34137 secunia.com
- http://secunia.com/advisories/34140 secunia.com
- http://secunia.com/advisories/34145 secunia.com
- http://secunia.com/advisories/34272 secunia.com
- http://secunia.com/advisories/34324 secunia.com
- http://secunia.com/advisories/34383 secunia.com
- http://secunia.com/advisories/34417 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm support.avaya.com
- http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document support.avaya.com
- http://www.debian.org/security/2009/dsa-1751 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 www.mandriva.com
- http://www.mozilla.org/security/announce/2009/mfsa2009-08.html www.mozilla.org
- http://www.redhat.com/support/errata/RHSA-2009-0258.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2009-0315.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2009-0325.html www.redhat.com
- http://www.securityfocus.com/bid/33990 www.securityfocus.com
- http://www.securitytracker.com/id?1021796 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0632 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=474456 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html www.redhat.com
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html lists.opensuse.org
- http://secunia.com/advisories/34137 secunia.com
- http://secunia.com/advisories/34140 secunia.com
- http://secunia.com/advisories/34145 secunia.com
- http://secunia.com/advisories/34272 secunia.com
- http://secunia.com/advisories/34324 secunia.com
- http://secunia.com/advisories/34383 secunia.com
- http://secunia.com/advisories/34417 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm support.avaya.com
- http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document support.avaya.com
- http://www.debian.org/security/2009/dsa-1751 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 www.mandriva.com
- http://www.mozilla.org/security/announce/2009/mfsa2009-08.html www.mozilla.org
- http://www.redhat.com/support/errata/RHSA-2009-0258.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2009-0315.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2009-0325.html www.redhat.com
- http://www.securityfocus.com/bid/33990 www.securityfocus.com
- http://www.securitytracker.com/id?1021796 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0632 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=474456 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html www.redhat.com