CVE-2009-2468

Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.

• mozilla firefox (<= 3.0.11) • mozilla firefox 0.1 • mozilla firefox 0.2 • mozilla firefox 0.3 • mozilla firefox 0.4 • mozilla firefox 0.5 • mozilla firefox 0.6 • mozilla firefox 0.6.1 • mozilla firefox 0.7 • mozilla firefox 0.7.1 • mozilla firefox 0.8 • mozilla firefox 0.9 • mozilla firefox 0.9.1 • mozilla firefox 0.9.2 • mozilla firefox 0.9.3 • mozilla firefox 0.9 rc • mozilla firefox 0.10 • mozilla firefox 0.10.1 • mozilla firefox 1.0 • mozilla firefox 1.0.1 • mozilla firefox 1.0.2 • mozilla firefox 1.0.3 • mozilla firefox 1.0.4 • mozilla firefox 1.0.5 • mozilla firefox 1.0.6 • mozilla firefox 1.0.7 • mozilla firefox 1.0.8 • mozilla firefox 1.4.1 • mozilla firefox 1.5 • mozilla firefox 1.5.0.1 • mozilla firefox 1.5.0.2 • mozilla firefox 1.5.0.3 • mozilla firefox 1.5.0.4 • mozilla firefox 1.5.0.5 • mozilla firefox 1.5.0.6 • mozilla firefox 1.5.0.7 • mozilla firefox 1.5.0.8 • mozilla firefox 1.5.0.9 • mozilla firefox 1.5.0.10 • mozilla firefox 1.5.0.11 • mozilla firefox 1.5.0.12 • mozilla firefox 1.5.1 • mozilla firefox 1.5.2 • mozilla firefox 1.5.3 • mozilla firefox 1.5.4 • mozilla firefox 1.5.5 • mozilla firefox 1.5.6 • mozilla firefox 1.5.7 • mozilla firefox 1.5.8 • mozilla firefox 1.8 • mozilla firefox 2.0 • mozilla firefox 2.0.0.1 • mozilla firefox 2.0.0.2 • mozilla firefox 2.0.0.3 • mozilla firefox 2.0.0.4 • mozilla firefox 2.0.0.5 • mozilla firefox 2.0.0.6 • mozilla firefox 2.0.0.7 • mozilla firefox 2.0.0.8 • mozilla firefox 2.0.0.9 … and 23 more