CVEvulnerability
CVE-2009-1571
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.
Affected configurations
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
• mozilla firefox 3.0.4
• mozilla firefox 3.0.5
• mozilla firefox 3.0.6
• mozilla firefox 3.0.7
• mozilla firefox 3.0.8
• mozilla firefox 3.0.9
• mozilla firefox 3.0.10
• mozilla firefox 3.0.11
• mozilla firefox 3.0.12
• mozilla firefox 3.0.13
• mozilla firefox 3.0.14
• mozilla firefox 3.0.15
• mozilla firefox 3.0.17
• mozilla firefox 3.5
• mozilla firefox 3.5.1
• mozilla firefox 3.5.2
• mozilla firefox 3.5.3
• mozilla firefox 3.5.4
• mozilla firefox 3.5.5
• mozilla firefox 3.5.6
• mozilla firefox 3.5.7
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/37242 Vendor Advisory
- http://secunia.com/advisories/38770 secunia.com
- http://secunia.com/advisories/38772 secunia.com
- http://secunia.com/advisories/38847 secunia.com
- http://secunia.com/secunia_research/2009-45/ Vendor Advisory
- http://www.debian.org/security/2010/dsa-1999 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:051 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-03.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0112.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0113.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0153.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0154.html www.redhat.com
- http://www.securityfocus.com/archive/1/509585/100/0/threaded www.securityfocus.com
- http://www.ubuntu.com/usn/USN-895-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-896-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/0405 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0650 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=526500 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56361 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615 oval.cisecurity.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/37242 Vendor Advisory
- http://secunia.com/advisories/38770 secunia.com
- http://secunia.com/advisories/38772 secunia.com
- http://secunia.com/advisories/38847 secunia.com
- http://secunia.com/secunia_research/2009-45/ Vendor Advisory
- http://www.debian.org/security/2010/dsa-1999 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:051 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-03.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0112.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0113.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0153.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0154.html www.redhat.com
- http://www.securityfocus.com/archive/1/509585/100/0/threaded www.securityfocus.com
- http://www.ubuntu.com/usn/USN-895-1 www.ubuntu.com
- http://www.ubuntu.com/usn/USN-896-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/0405 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0650 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=526500 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56361 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615 oval.cisecurity.org