← back
CVE-2009-3077

CVE-2009-3077

EPSS 4.6%
Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=506871http://secunia.com/advisories/36669http://secunia.com/advisories/36670http://secunia.com/advisories/36671http://secunia.com/advisories/36692http://secunia.com/advisories/37098http://secunia.com/advisories/38977http://secunia.com/advisories/39001https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606http://www.debian.org/security/2009/dsa-1885