{ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2009-0773", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "n/a", "version" : { "version_data" : [ { "version_value" : "n/a" } ] } } ] }, "vendor_name" : "n/a" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains \"some non-set elements,\" which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "n/a" } ] } ] }, "references" : { "reference_data" : [ { "name" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html", "refsource" : "CONFIRM", "url" : "http://www.mozilla.org/security/announce/2009/mfsa2009-07.html" }, { "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=457521", "refsource" : "CONFIRM", "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=457521" }, { "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467499", "refsource" : "CONFIRM", "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467499" }, { "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472787", "refsource" : "CONFIRM", "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=472787" }, { "name" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document", "refsource" : "CONFIRM", "url" : "http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document" }, { "name" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm", "refsource" : "CONFIRM", "url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm" }, { "name" : "DSA-1751", "refsource" : "DEBIAN", "url" : "http://www.debian.org/security/2009/dsa-1751" }, { "name" : "DSA-1830", "refsource" : "DEBIAN", "url" : "http://www.debian.org/security/2009/dsa-1830" }, { "name" : "FEDORA-2009-3101", "refsource" : "FEDORA", "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html" }, { "name" : "MDVSA-2009:075", "refsource" : "MANDRIVA", "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:075" }, { "name" : "MDVSA-2009:083", "refsource" : "MANDRIVA", "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2009:083" }, { "name" : "RHSA-2009:0315", "refsource" : "REDHAT", "url" : "http://www.redhat.com/support/errata/RHSA-2009-0315.html" }, { "name" : "SSA:2009-083-02", "refsource" : "SLACKWARE", "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420" }, { "name" : "SSA:2009-083-03", "refsource" : "SLACKWARE", "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952" }, { "name" : "SUSE-SA:2009:012", "refsource" : "SUSE", "url" : "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html" }, { "name" : "33990", "refsource" : "BID", "url" : "http://www.securityfocus.com/bid/33990" }, { "name" : "oval:org.mitre.oval:def:10491", "refsource" : "OVAL", "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491" }, { "name" : "oval:org.mitre.oval:def:5856", "refsource" : "OVAL", "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856" }, { "name" : "oval:org.mitre.oval:def:5980", "refsource" : "OVAL", "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980" }, { "name" : "oval:org.mitre.oval:def:6141", "refsource" : "OVAL", "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141" }, { "name" : "oval:org.mitre.oval:def:6708", "refsource" : "OVAL", "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708" }, { "name" : "1021795", "refsource" : "SECTRACK", "url" : "http://www.securitytracker.com/id?1021795" }, { "name" : "34145", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34145" }, { "name" : "34272", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34272" }, { "name" : "34383", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34383" }, { "name" : "34462", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34462" }, { "name" : "34464", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34464" }, { "name" : "34527", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34527" }, { "name" : "34140", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/34140" }, { "name" : "ADV-2009-0632", "refsource" : "VUPEN", "url" : "http://www.vupen.com/english/advisories/2009/0632" } ] } }