CVE-2009-0821: Medium severity Mozilla Firefox vulnerability
Published Mar 5, 2009
·Updated
Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element.
Affected Software
86 affected components
Mozilla Firefox=0.1
Mozilla Firefox=0.9_rc
Mozilla Firefox=0.8
Mozilla Firefox=2.0.0.12
Mozilla Firefox=1.5-beta2
Mozilla Firefox=2.0_.7
Mozilla Firefox=1.5.2
Mozilla Firefox=1.5.0.6
Mozilla Firefox=1.8
Mozilla Firefox=2.0.0.2
Mozilla Firefox=1.5.0.10
Mozilla Firefox=1.5.0.3
Mozilla Firefox=1.5.0.11
Mozilla Firefox=1.5.4
Mozilla Firefox=1.0.2
Mozilla Firefox=1.5-beta1
Mozilla Firefox=2.0_8
Mozilla Firefox=2.0_.9
Mozilla Firefox=1.5
Mozilla Firefox=0.9.1
Mozilla Firefox=1.0.4
Mozilla Firefox=2.0.0.7
Mozilla Firefox=1.0.7
Mozilla Firefox=2.0.0.9
Mozilla Firefox=0.10.1
Mozilla Firefox=2.0_.1
Mozilla Firefox=0.9
Mozilla Firefox=2.0.0.16
Mozilla Firefox=1.5.6
Mozilla Firefox=2.0.0.17
Mozilla Firefox=0.7
Mozilla Firefox=2.0.0.15
Mozilla Firefox=0.2
Mozilla Firefox=0.3
Mozilla Firefox=2.0_.10
Mozilla Firefox=1.0
Mozilla Firefox=1.5.0.7
Mozilla Firefox=2.0
Mozilla Firefox=1.0.1
Mozilla Firefox=2.0-beta1
Mozilla Firefox=2.0.0.14
Mozilla Firefox=0.6
Mozilla Firefox=0.7.1
Mozilla Firefox=1.5.0.8
Mozilla Firefox=2.0_.5
Mozilla Firefox=1.0.6
Mozilla Firefox=2.0.0.3
Mozilla Firefox=1.5.0.9
Mozilla Firefox=1.5.0.5
Mozilla Firefox=1.5.7
Mozilla Firefox=1.5.0.12
Mozilla Firefox=2.0.0.6
Mozilla Firefox=2.0.0.11
Mozilla Firefox=1.5.0.2
Mozilla Firefox=1.0.3
Mozilla Firefox=2.0.0.4
Mozilla Firefox<=2.0.0.20
Mozilla Firefox=0.5
Mozilla Firefox=0.6.1
Mozilla Firefox=1.5.1
Mozilla Firefox=0.9.3
Mozilla Firefox=2.0.0.13
Mozilla Firefox=2.0.0.18
Mozilla Firefox=2.0-rc2
Mozilla Firefox=2.0.0.1
Mozilla Firefox=2.0_.6
Mozilla Firefox=2.0_.4
Mozilla Firefox=1.5.5
Mozilla Firefox=0.9.2
Mozilla Firefox=1.0-preview_release
Mozilla Firefox=2.0-beta_1
Mozilla Firefox=2.0.0.8
Mozilla Firefox=0.9-rc
Mozilla Firefox=2.0.0.19
Mozilla Firefox=1.5.8
Mozilla Firefox=1.5.3
Mozilla Firefox=0.4
Mozilla Firefox=1.5.0.4
Mozilla Firefox=1.5.0.1
Mozilla Firefox=0.10
Mozilla Firefox=1.0.5
Mozilla Firefox=2.0.0.5
Mozilla Firefox=2.0.0.10
Mozilla Firefox=2.0-rc3
Mozilla Firefox=1.0.6
Mozilla Firefox=1.0.8
Event History
Mar 5, 2009
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0821?
CVE-2009-0821 is considered a denial of service vulnerability that can crash Mozilla Firefox.
2
How do I fix CVE-2009-0821?
To mitigate CVE-2009-0821, users should upgrade to versions of Mozilla Firefox later than 2.0.0.20.
3
What versions of Firefox are affected by CVE-2009-0821?
CVE-2009-0821 affects Mozilla Firefox versions 2.0.0.20 and earlier.
4
What type of vulnerability is CVE-2009-0821?
CVE-2009-0821 is a denial of service vulnerability that can be triggered by nested window.print calls.
5
Can exploiting CVE-2009-0821 lead to data breaches?
Exploiting CVE-2009-0821 does not lead to data breaches but can disrupt user activity by crashing the browser.