← back
CVE-2009-0772

CVE-2009-0772

EPSS 3.7%
The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=475136http://secunia.com/advisories/34137http://secunia.com/advisories/34140http://secunia.com/advisories/34145http://secunia.com/advisories/34272http://secunia.com/advisories/34324http://secunia.com/advisories/34383http://secunia.com/advisories/34387http://secunia.com/advisories/34417http://secunia.com/advisories/34462