CVE-2009-1571: Code Injection

Published Feb 21, 2010

Updated

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

Affected Software

67 affected components

Mozilla SeaMonkey=1.1.10

Mozilla SeaMonkey=1.0.3

Mozilla Firefox=3.0.17

Mozilla Firefox=3.5.3

Mozilla SeaMonkey=1.1.8

Mozilla Firefox=3.0.7

Mozilla SeaMonkey=1.0.1

Mozilla SeaMonkey=1.1.7

Mozilla Firefox=3.0.9

Mozilla SeaMonkey=1.0.6

Mozilla SeaMonkey=1.0.9

Mozilla SeaMonkey=1.1.3

Mozilla SeaMonkey=1.0

Mozilla Firefox=3.5.6

Mozilla Firefox=3.0.8

Mozilla SeaMonkey=2.0.2

Mozilla SeaMonkey=1.1.17

Mozilla SeaMonkey=2.0-alpha_2

Mozilla SeaMonkey=1.1.5

Mozilla SeaMonkey=1.0.7

Mozilla Firefox=3.5

Mozilla SeaMonkey=1.0-beta

Mozilla Firefox=3.5.5

Mozilla Firefox=3.0.4

Mozilla SeaMonkey=2.0-rc2

Mozilla SeaMonkey=2.0-alpha_3

Mozilla Firefox=3.5.4

Mozilla Firefox=3.5.7

Mozilla Firefox=3.0.5

Mozilla SeaMonkey=1.0-alpha

Mozilla SeaMonkey=1.1.12

Mozilla Firefox=3.5.1

Mozilla SeaMonkey=1.1

Mozilla Firefox=3.0.14

Mozilla Firefox=3.5.2

Mozilla SeaMonkey=1.1.14

Mozilla Firefox=3.0-beta2

Mozilla SeaMonkey=1.1.2

Mozilla SeaMonkey=2.0-beta_2

Mozilla Firefox=3.0.10

Mozilla SeaMonkey=1.0.2

Mozilla SeaMonkey=1.0.8

Mozilla SeaMonkey=1.1.11

Mozilla Firefox=3.0.12

Mozilla Firefox=3.0.3

Mozilla SeaMonkey=1.1.1

Mozilla SeaMonkey=2.0.1

Mozilla SeaMonkey=1.0.5

Mozilla SeaMonkey=1.1.15

Mozilla Firefox=3.0.6

Mozilla Firefox=3.0.15

Mozilla SeaMonkey=1.1.6

Mozilla Firefox=3.0

Mozilla SeaMonkey=1.1.16

Mozilla Firefox=3.0.1

Mozilla SeaMonkey=2.0-beta_1

Mozilla Firefox=3.0.2

Mozilla SeaMonkey=2.0-rc1

Mozilla SeaMonkey=1.0.4

Mozilla SeaMonkey=1.1.9

Mozilla SeaMonkey=1.1.13

Mozilla Firefox=3.0-beta5

Mozilla Firefox=3.0.13

Mozilla SeaMonkey=2.0

Mozilla Firefox=3.0-alpha

Mozilla SeaMonkey=1.1.4

Mozilla Firefox=3.0.11

Event History

Feb 21, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Feb 22, 2010

Data Sourced

via NVD·01:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1571?

The severity of CVE-2009-1571 is classified as critical due to the potential for remote code execution.

How do I fix CVE-2009-1571?

To fix CVE-2009-1571, users should update their Mozilla Firefox, Thunderbird, or SeaMonkey to the latest versions that include the security patches.

Which versions are affected by CVE-2009-1571?

CVE-2009-1571 affects Mozilla Firefox versions 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3.

What type of vulnerability is CVE-2009-1571?

CVE-2009-1571 is categorized as a use-after-free vulnerability in the HTML parser.

Can CVE-2009-1571 be exploited remotely?

Yes, CVE-2009-1571 can be exploited remotely by attackers to execute arbitrary code.