CVE-2009-1837

Firefox Race condition while accessing the private data of a NPObject JS wrapper class object

Published Jun 12, 2009 CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed
Description
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1820-1 New xulrunner packages fix several vulnerabilities
Ubuntu USN Ubuntu USN USN-779-1 Firefox and Xulrunner vulnerabilities
History

No history.