Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2009-09-10 21:30
Updated : 2024-02-04 17:33
NVD link : CVE-2009-3077
Mitre link : CVE-2009-3077
CVE.ORG link : CVE-2009-3077
JSON object : View
Products Affected
mozilla
- firefox
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')