CVE-2009-2477

CRITICAL 9.3CVE-2009-2477 · Published 15/07/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
firefox mozilla	`= 3.5`	No fix yet

Description

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

References

blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35
isc.sans.org/diary.html
secunia.com/advisories/35798 · Vendor Advisory
sunsolve.sun.com/search/document.do
voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html
exploit-db.com/exploits/9137
exploit-db.com/exploits/9181
h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761
kb.cert.org/vuls/id/443060 · US Government Resource
mozilla.org/security/announce/2009/mfsa2009-41.html · Patch
securityfocus.com/bid/35660 · Exploit
vupen.com/english/advisories/2009/1868 · Patch
bugzilla.mozilla.org/show_bug.cgi
exploit-db.com/exploits/40936
redhat.com/archives/fedora-package-announce/2009-July/msg00909.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free