CVE-2009-1837

Firefox Race condition while accessing the private data of a NPObject JS wrapper class object

Published Jun 12, 2009 CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed
Description
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1820-1 New xulrunner packages fix several vulnerabilities
Ubuntu USN Ubuntu USN USN-779-1 Firefox and Xulrunner vulnerabilities
History

No history.

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

  • CWE-416

    Use After Free

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 5:27 AM
Reserved
May 29, 2009, 12:00 AM
Status
Modified
Published
Jun 12, 2009, 9:30 PM
Modified
Jun 16, 2026, 11:08 PM
Severity
Critical
Public date
Jun 11, 2009, 12:00 AM