CVE-2009-2535: Medium severity mozilla seamonkey vulnerability
Published Jul 20, 2009
·Updated
Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.
Affected Software
185 affected components
Mozilla SeaMonkey=1.1.10
Mozilla Firefox=0.1
Mozilla Thunderbird=1.5.0.7
Mozilla Firefox=0.9_rc
Mozilla Thunderbird=0.6
Mozilla SeaMonkey=1.0.3
Mozilla Firefox=0.8
Mozilla Firefox=2.0.0.12
Mozilla Thunderbird=0.7.2
Mozilla Firefox=1.5-beta2
Mozilla Firefox=2.0_.7
Mozilla Thunderbird=2.0.0.4
Mozilla SeaMonkey=1.1.8
Mozilla Firefox=1.5.2
Mozilla SeaMonkey=1.0.1
Mozilla SeaMonkey=1.1.7
Mozilla SeaMonkey=1.5.0.10
Mozilla Thunderbird=2.0.0.6
Mozilla SeaMonkey=1.0.6
Mozilla Firefox=1.5.0.6
Mozilla Firefox=1.8
Mozilla SeaMonkey=1.0.9
Mozilla Thunderbird=0.3
Mozilla SeaMonkey=1.1.3
Mozilla Firefox=2.0.0.2
Mozilla Firefox=1.5.0.10
Mozilla Firefox=1.5.0.3
Mozilla Thunderbird=0.2
Mozilla SeaMonkey=1.0
Mozilla Thunderbird=2.0_.5
Mozilla Thunderbird=1.0.7
Mozilla Firefox=1.5.0.11
Mozilla Firefox=1.4.1
Mozilla SeaMonkey=1.0.99
Mozilla Thunderbird=2.0.0.9
Mozilla Firefox=1.5.4
Mozilla SeaMonkey=1.1.5
Mozilla SeaMonkey=1.0.7
Mozilla SeaMonkey=1.0-beta
Mozilla Thunderbird=2.0_.12
Mozilla Thunderbird=2.0.0.15
Mozilla Firefox=3.0.4
Mozilla Firefox=1.5-beta1
Mozilla SeaMonkey=1.1-alpha
Mozilla Thunderbird=2.0.0.16
Mozilla Firefox=2.0_8
Mozilla Thunderbird=2.0.0.8
Mozilla Thunderbird=2.0.0.7
Mozilla Firefox=2.0_.9
Mozilla SeaMonkey=1.0-alpha
Mozilla Thunderbird=1.7.1
Mozilla Thunderbird=2.0_8
Mozilla Firefox=1.5
Mozilla Thunderbird=1.5.0.3
Mozilla Firefox=0.9.1
Mozilla Thunderbird=1.5.0.10
Mozilla Thunderbird=1.5.0.5
Mozilla Firefox=1.0.4
Mozilla Firefox=2.0.0.7
Mozilla Firefox=1.0.7
Mozilla Thunderbird=1.5.0.6
Mozilla SeaMonkey=1.1.12
Mozilla SeaMonkey=1.1
Mozilla Firefox=2.0.0.9
Mozilla Firefox=0.10.1
Mozilla Firefox=2.0_.1
Mozilla Thunderbird=1.0
Mozilla Thunderbird=2.0.0.3
Mozilla Firefox=0.9
Mozilla Thunderbird=1.0.1
Mozilla Firefox=2.0.0.16
Mozilla SeaMonkey=1.1.14
Mozilla Thunderbird=1.5-beta2
Mozilla Firefox=1.5.6
Mozilla Thunderbird=2.0.0.2
Mozilla Firefox=2.0.0.17
Mozilla Firefox=0.7
Mozilla SeaMonkey=1.1.2
Mozilla Firefox=2.0.0.15
Mozilla SeaMonkey=1.0
Mozilla Firefox=0.2
Mozilla SeaMonkey=1.0.2
Mozilla SeaMonkey=1.0.8
Mozilla Thunderbird=1.0.2
Mozilla Thunderbird=2.0.0.0
Mozilla Thunderbird=1.5.0.13
Mozilla SeaMonkey=1.1.11
Mozilla Firefox=2.0_.10
Mozilla Firefox=1.0
Mozilla SeaMonkey=1.5.0.9
Mozilla Firefox=3.0.3
Mozilla SeaMonkey=1.1-beta
Mozilla SeaMonkey=1.1.1
Mozilla Firefox=1.5.0.7
Mozilla Thunderbird=2.0.0.12
Mozilla Firefox=2.0
Mozilla Thunderbird=1.5
Mozilla Firefox=1.0.1
Mozilla SeaMonkey=1.5.0.8
Mozilla Thunderbird=1.5.0.2
Mozilla SeaMonkey=1.1.5-1.1.10
Mozilla Firefox=2.0.0.14
Mozilla Firefox=0.6
Mozilla Thunderbird=2.0.0.13
Mozilla SeaMonkey=1.0.5
Mozilla SeaMonkey=1.1.15
Mozilla Thunderbird=2.0_.9
Mozilla Thunderbird=1.5.0.8
Mozilla Thunderbird=2.0.0.14
Mozilla Firefox=1.5.0.8
Mozilla Firefox=2.0_.5
Mozilla Firefox=1.0.6
Mozilla Thunderbird=0.5
Mozilla Thunderbird=1.0.4
Mozilla Firefox=2.0.0.3
Mozilla Thunderbird=1.5.2
Mozilla Firefox=1.5.0.9
Mozilla Thunderbird=2.0.0.17
Mozilla Firefox=1.5.0.5
Mozilla Firefox=1.5.7
Mozilla Firefox=1.5.0.12
Mozilla Thunderbird=1.5.0.9
Mozilla Thunderbird=1.5.0.11
Mozilla Thunderbird=0.9
Mozilla Thunderbird=1.0.3
Mozilla SeaMonkey=1.1.6
Mozilla Thunderbird=2.0.0.11
Mozilla Thunderbird=1.5.0.12
Mozilla Thunderbird=2.0_.13
Mozilla Firefox=3.0
Mozilla Firefox=2.0.0.11
Mozilla Firefox=1.5.0.2
Mozilla SeaMonkey=1.1.16
Mozilla Firefox=1.0.3
Mozilla Firefox=3.0.1
Mozilla Firefox=0.6.1
Mozilla Firefox=1.5.1
Mozilla Thunderbird=2.0_.14
Mozilla Thunderbird=0.7.3
Mozilla Firefox=0.9.3
Mozilla SeaMonkey=1.0
Mozilla Firefox=2.0.0.13
Mozilla Thunderbird=0.4
Mozilla SeaMonkey=1.0
Mozilla Thunderbird=1.5.1
Mozilla Thunderbird=0.7
Mozilla Thunderbird=1.5.0.14
Mozilla Firefox=2.0.0.1
Mozilla Thunderbird=1.0.6
Mozilla Firefox=3.0.2
Mozilla Thunderbird=1.0.5-beta
Mozilla Firefox=2.0_.6
Mozilla Firefox=2.0_.4
Mozilla Thunderbird=2.0.0.5
Mozilla Thunderbird=1.7.3
Mozilla SeaMonkey=1.0.4
Mozilla Firefox=1.5.5
Mozilla Firefox=0.9.2
Mozilla Thunderbird=2.0.0.1
Mozilla SeaMonkey=1.1.9
Mozilla SeaMonkey=1.1.13
Mozilla Thunderbird<=2.0.0.18
Mozilla Thunderbird=1.5.0.1
Mozilla Thunderbird=2.0_.4
Mozilla Thunderbird=1.0.8
Mozilla Thunderbird=0.1
Mozilla Firefox=0.9-rc
Mozilla Firefox=1.5.8
Mozilla Firefox=1.5.3
Mozilla Firefox=0.4
Mozilla Thunderbird=0.7.1
Mozilla Thunderbird=1.0.5
Mozilla Thunderbird=0.8
Mozilla Firefox=1.5.0.4
Mozilla Firefox=1.5.0.1
Mozilla Firefox<=2.0.0.18
Mozilla Thunderbird=2.0_.6
Mozilla Firefox=1.0.5
Mozilla Firefox=2.0.0.5
Mozilla Firefox=2.0.0.10
Mozilla Thunderbird=2.0.0.19
Mozilla Firefox=1.0.6
Mozilla Thunderbird=1.5.0.4
Mozilla SeaMonkey=1.1.4
Mozilla Firefox=1.0.8
Event History
Jul 20, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2535?
CVE-2009-2535 is classified as a denial of service vulnerability that can lead to memory consumption and application crashes.
2
How do I fix CVE-2009-2535?
To fix CVE-2009-2535, upgrade to a version of Mozilla Firefox, SeaMonkey, or Thunderbird that is later than the vulnerable versions mentioned in the CVE.
3
What systems are affected by CVE-2009-2535?
CVE-2009-2535 affects several versions of Mozilla Firefox, SeaMonkey, and Thunderbird prior to their respective updates.
4
Can CVE-2009-2535 be exploited remotely?
Yes, CVE-2009-2535 can be exploited remotely by attackers to cause denial of service.
5
Is CVE-2009-2535 related to other vulnerabilities?
CVE-2009-2535 is related to CVE-2009-1692 as it pertains to similar issues concerning the Select object.