Upstream information
CVE-2009-3382 at MITRE
Description
layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
CVSS v2 Scores
| National Vulnerability Database |
Base Score | 10 |
Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
SUSE Bugzilla entries:
522109 [RESOLVED / FIXED],
545277 [RESOLVED / FIXED]
SUSE Security Advisories:
List of released packages
Product(s) | Fixed package version(s) | References |
SUSE Linux Enterprise Server 11 SP1 | mozilla-xulrunner190 >= 1.9.0.19-0.1.1
mozilla-xulrunner190-32bit >= 1.9.0.19-0.1.1
mozilla-xulrunner190-gnomevfs >= 1.9.0.19-0.1.1
mozilla-xulrunner190-translations >= 1.9.0.19-0.1.1
mozilla-xulrunner190-x86 >= 1.9.0.19-0.1.1
| Patchnames: SUSE Linux Enterprise Server 11 SP1 GA mozilla-xulrunner190-1.9.0.19-0.1.1 |
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server for SAP Applications 11 | MozillaFirefox >= 3.5.4-1.1.2
MozillaFirefox-branding-SLED >= 3.5-1.1.5
MozillaFirefox-translations >= 3.5.4-1.1.2
gconf2 >= 2.24.0-7.5
gconf2-32bit >= 2.24.0-7.5
gconf2-x86 >= 2.24.0-7.5
libfreebl3 >= 3.12.3.1-1.2.1
libfreebl3-32bit >= 3.12.3.1-1.2.1
libfreebl3-x86 >= 3.12.3.1-1.2.1
libidl >= 0.8.11-2.14
libidl-32bit >= 0.8.11-2.14
libidl-x86 >= 0.8.11-2.14
mozilla-nspr >= 4.8-1.3.1
mozilla-nspr-32bit >= 4.8-1.3.1
mozilla-nspr-x86 >= 4.8-1.3.1
mozilla-nss >= 3.12.3.1-1.2.1
mozilla-nss-32bit >= 3.12.3.1-1.2.1
mozilla-nss-tools >= 3.12.3.1-1.2.1
mozilla-nss-x86 >= 3.12.3.1-1.2.1
mozilla-xulrunner190 >= 1.9.0.15-0.1.2
mozilla-xulrunner190-32bit >= 1.9.0.15-0.1.2
mozilla-xulrunner190-gnomevfs >= 1.9.0.15-0.1.2
mozilla-xulrunner190-translations >= 1.9.0.15-0.1.2
mozilla-xulrunner190-x86 >= 1.9.0.15-0.1.2
mozilla-xulrunner191 >= 1.9.1.4-2.1.3
mozilla-xulrunner191-32bit >= 1.9.1.4-2.1.3
mozilla-xulrunner191-gnomevfs >= 1.9.1.4-2.1.3
mozilla-xulrunner191-translations >= 1.9.1.4-2.1.3
mozilla-xulrunner191-x86 >= 1.9.1.11-0.1.1
mozilla-xulrunner192 >= 1.9.2.12-0.6.1
mozilla-xulrunner192-32bit >= 1.9.2.12-0.6.1
mozilla-xulrunner192-gnome >= 1.9.2.12-0.6.1
mozilla-xulrunner192-translations >= 1.9.2.12-0.6.1
mozilla-xulrunner192-x86 >= 1.9.2.12-0.6.1
orbit2 >= 2.14.16-2.16
orbit2-32bit >= 2.14.16-2.16
orbit2-x86 >= 2.14.16-2.16
| Patchnames: slessp0-MozillaFirefox slessp0-mozilla-xulrunner190 |
SUSE Timeline for this CVE
CVE page created: Tue Jul 9 17:04:26 2013
CVE page last modified: Tue Jul 2 15:19:53 2024