CVE-2009-1833

CVE-2009-1833

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 9.2%
exploitation probability
9.2%top 5% of all CVEs
observed exploitation
nono source reports it
The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors.
Affected products
n/a · n/a
References
http://osvdb.org/55152http://osvdb.org/55153http://osvdb.org/55154http://rhn.redhat.com/errata/RHSA-2009-1096.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=369696https://bugzilla.mozilla.org/show_bug.cgi?id=426520https://bugzilla.mozilla.org/show_bug.cgi?id=427196https://bugzilla.mozilla.org/show_bug.cgi?id=487204https://bugzilla.redhat.com/show_bug.cgi?id=503570http://secunia.com/advisories/35331http://secunia.com/advisories/35415http://secunia.com/advisories/35428