Description
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1820-1 | New xulrunner packages fix several vulnerabilities |
Ubuntu USN |
USN-779-1 | Firefox and Xulrunner vulnerabilities |
References
History
No history.
Subscriptions
Debian
Subscribe
Debian Linux
Subscribe
Fedoraproject
Subscribe
Fedora
Subscribe
Mozilla
Subscribe
Firefox
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Aus
Subscribe
Enterprise Linux Workstation
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T05:27:54.654Z
Reserved: 2009-05-29T00:00:00.000Z
Link: CVE-2009-1837
No data.
Status : Modified
Published: 2009-06-12T21:30:00.360
Modified: 2026-04-23T00:35:47.467
Link: CVE-2009-1837
OpenCVE Enrichment
No data.
Debian DSA
Ubuntu USN