← back
CVE-2009-1313

CVE-2009-1313

EPSS 8.4%
The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/32961unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.mozilla.org/show_bug.cgi?id=489647https://bugzilla.mozilla.org/show_bug.cgi?id=489676https://bugzilla.mozilla.org/show_bug.cgi?id=490233https://bugzilla.redhat.com/show_bug.cgi?id=497447http://secunia.com/advisories/34851http://secunia.com/advisories/34866http://secunia.com/advisories/34910http://secunia.com/advisories/34919http://securitytracker.com/id?1022126http://securitytracker.com/id?1022127http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446