CVE-2009-2477

Published: Jul 15, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Affected (1)

Products: Mozilla: Firefox

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 3.5

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (30)

http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/

Source: cve@mitre.org

http://isc.sans.org/diary.html?storyid=6796

Source: cve@mitre.org

http://secunia.com/advisories/35798

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1

Source: cve@mitre.org

http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html

Source: cve@mitre.org

http://www.exploit-db.com/exploits/9137

Source: cve@mitre.org

http://www.exploit-db.com/exploits/9181

Source: cve@mitre.org

http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/443060

Source: cve@mitre.org

US Government Resource

http://www.mozilla.org/security/announce/2009/mfsa2009-41.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/35660

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2009/1868

Source: cve@mitre.org

PatchVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=503286

Source: cve@mitre.org

https://www.exploit-db.com/exploits/40936/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html

Source: cve@mitre.org

http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/

Source: af854a3a-2127-422b-91ae-364da2661108

http://isc.sans.org/diary.html?storyid=6796

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35798

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/9137

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/9181

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/443060

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mozilla.org/security/announce/2009/mfsa2009-41.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/35660

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2009/1868

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=503286

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/40936/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.