First published: Tue Aug 04 2009(Updated: )
The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <=3.0.12 | |
Mozilla Firefox | =3.0.1 | |
Mozilla Firefox | =3.0.2 | |
Mozilla Firefox | =3.0.3 | |
Mozilla Firefox | =3.0.4 | |
Mozilla Firefox | =3.0.5 | |
Mozilla Firefox | =3.0.6 | |
Mozilla Firefox | =3.0.7 | |
Mozilla Firefox | =3.0.10 | |
Mozilla Firefox | =3.0.11 | |
Mozilla Firefox | =3.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-2662 has a severity rating of medium due to its potential to cause denial of service and possibly allow arbitrary code execution.
To fix CVE-2009-2662, update Mozilla Firefox to version 3.5.2 or later.
CVE-2009-2662 affects Mozilla Firefox versions 3.5.x prior to 3.5.2 and 3.0.x versions prior to 3.0.12.
CVE-2009-2662 is a memory corruption vulnerability that can lead to application crashes.
Yes, CVE-2009-2662 can be exploited remotely by attackers, leading to denial of service.