CVE-2009-0772

Firefox 2 and 3 - Layout engine crashes

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.

El motor en Mozilla Firefox 2 y 3 anteriores v3.0.7, Thunderbird anteriores a v2.0.0.21, y SeaMonkey v1.1.15 permite a los atacantes remotos causar una denegación de servicios (caída) y posiblemente ejecutar arbitrariamente código a través de vectores relativos a nsCSSStyleSheet::GetOwnerNode, eventos, y recolección de basura, lo que lanza una corrupción de memoria

*Credits: N/A

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-03-03 CVE Reserved
2009-03-05 CVE Published
2023-10-13 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (40)

URL	Tag	Source
http://secunia.com/advisories/34137	Third Party Advisory
http://secunia.com/advisories/34140	Third Party Advisory
http://secunia.com/advisories/34145	Third Party Advisory
http://secunia.com/advisories/34272	Third Party Advisory
http://secunia.com/advisories/34324	Third Party Advisory
http://secunia.com/advisories/34383	Third Party Advisory
http://secunia.com/advisories/34387	Third Party Advisory
http://secunia.com/advisories/34417	Third Party Advisory
http://secunia.com/advisories/34462	Third Party Advisory
http://secunia.com/advisories/34464	Third Party Advisory
http://secunia.com/advisories/34527	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm	X_refsource_confirm
http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document	X_refsource_confirm
http://www.securityfocus.com/bid/33990	Vdb Entry
http://www.securitytracker.com/id?1021795	Vdb Entry
http://www.vupen.com/english/advisories/2009/0632	Vdb Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=475136	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5703	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5945	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6097	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6811	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9609	Signature

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html	2018-10-03
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html	2018-10-03
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420	2018-10-03
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952	2018-10-03
http://www.debian.org/security/2009/dsa-1751	2018-10-03
http://www.debian.org/security/2009/dsa-1830	2018-10-03
http://www.mandriva.com/security/advisories?name=MDVSA-2009:075	2018-10-03
http://www.mandriva.com/security/advisories?name=MDVSA-2009:083	2018-10-03
http://www.mozilla.org/security/announce/2009/mfsa2009-07.html	2018-10-03
http://www.redhat.com/support/errata/RHSA-2009-0258.html	2018-10-03
http://www.redhat.com/support/errata/RHSA-2009-0315.html	2018-10-03
http://www.redhat.com/support/errata/RHSA-2009-0325.html	2018-10-03
https://usn.ubuntu.com/741-1	2018-10-03
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html	2018-10-03
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html	2018-10-03
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html	2018-10-03
https://access.redhat.com/security/cve/CVE-2009-0772	2009-03-05
https://bugzilla.redhat.com/show_bug.cgi?id=488273	2009-03-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				<= 3.0.6 Search vendor "Mozilla" for product "Firefox" and version " <= 3.0.6"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0 Search vendor "Mozilla" for product "Firefox" and version "1.0"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.1 Search vendor "Mozilla" for product "Firefox" and version "1.0.1"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.2 Search vendor "Mozilla" for product "Firefox" and version "1.0.2"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.3 Search vendor "Mozilla" for product "Firefox" and version "1.0.3"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.4 Search vendor "Mozilla" for product "Firefox" and version "1.0.4"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.5 Search vendor "Mozilla" for product "Firefox" and version "1.0.5"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.6 Search vendor "Mozilla" for product "Firefox" and version "1.0.6"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.7 Search vendor "Mozilla" for product "Firefox" and version "1.0.7"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.0.8 Search vendor "Mozilla" for product "Firefox" and version "1.0.8"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5 Search vendor "Mozilla" for product "Firefox" and version "1.5"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.1 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.1"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.2 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.2"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.3 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.3"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.4 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.4"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.5 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.5"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.6 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.6"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.7 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.7"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.8 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.8"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.9 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.9"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.10 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.10"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.11 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.11"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				1.5.0.12 Search vendor "Mozilla" for product "Firefox" and version "1.5.0.12"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0 Search vendor "Mozilla" for product "Firefox" and version "2.0"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.1 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.1"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.2 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.2"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.3 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.3"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.4 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.4"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.5 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.5"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.6 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.6"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.7 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.7"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.8 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.8"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.9 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.9"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.10 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.10"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.11 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.11"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.12 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.12"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.13 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.13"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.14 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.14"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.15 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.15"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.16 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.16"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.17 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.17"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.18 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.18"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.19 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.19"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				2.0.0.20 Search vendor "Mozilla" for product "Firefox" and version "2.0.0.20"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				3.0 Search vendor "Mozilla" for product "Firefox" and version "3.0"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				3.0.1 Search vendor "Mozilla" for product "Firefox" and version "3.0.1"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				3.0.2 Search vendor "Mozilla" for product "Firefox" and version "3.0.2"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				3.0.3 Search vendor "Mozilla" for product "Firefox" and version "3.0.3"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				3.0.4 Search vendor "Mozilla" for product "Firefox" and version "3.0.4"		-		Affected
Mozilla Search vendor "Mozilla"		Firefox Search vendor "Mozilla" for product "Firefox"				3.0.5 Search vendor "Mozilla" for product "Firefox" and version "3.0.5"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				<= 1.1.14 Search vendor "Mozilla" for product "Seamonkey" and version " <= 1.1.14"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0 Search vendor "Mozilla" for product "Seamonkey" and version "1.0"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.1 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.1"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.2 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.2"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.3 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.3"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.5 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.5"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.6 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.6"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.7 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.7"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.8 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.8"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.0.9 Search vendor "Mozilla" for product "Seamonkey" and version "1.0.9"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1 Search vendor "Mozilla" for product "Seamonkey" and version "1.1"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1 Search vendor "Mozilla" for product "Seamonkey" and version "1.1"		alpha		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1 Search vendor "Mozilla" for product "Seamonkey" and version "1.1"		beta		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.1 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.1"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.2 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.2"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.3 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.3"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.4 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.4"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.5 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.5"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.6 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.6"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.7 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.7"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.8 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.8"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.9 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.9"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.10 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.10"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.11 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.11"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.12 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.12"		-		Affected
Mozilla Search vendor "Mozilla"		Seamonkey Search vendor "Mozilla" for product "Seamonkey"				1.1.13 Search vendor "Mozilla" for product "Seamonkey" and version "1.1.13"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				<= 2.0.0.20 Search vendor "Mozilla" for product "Thunderbird" and version " <= 2.0.0.20"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.0 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.0"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.4 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.4"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.5 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.5"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.6 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.6"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.9 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.9"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.12 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.12"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.14 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.14"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.16 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.16"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.17 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.17"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.18 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.18"		-		Affected
Mozilla Search vendor "Mozilla"		Thunderbird Search vendor "Mozilla" for product "Thunderbird"				2.0.0.19 Search vendor "Mozilla" for product "Thunderbird" and version "2.0.0.19"		-		Affected