CVE-2009-1302
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Firefox是Mozilla所发布的开源WEB浏览器。 Mozilla Firefox, Thunderbird 浏览器引擎 存在内存崩溃和拒绝服务攻击漏洞，引起该漏洞向量相关内容包括：(1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) xslt_attributeset_ImportSameName.html, (5) nsXULDocument::Sy
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2009-1302
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Mozilla Firefox 浏览器引擎 内存崩溃和拒绝服务攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Firefox是Mozilla所发布的开源WEB浏览器。 Mozilla Firefox, Thunderbird 浏览器引擎 存在内存崩溃和拒绝服务攻击漏洞，引起该漏洞向量相关内容包括：(1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) xslt_attributeset_ImportSameName.html, (5) nsXULDocument::Sy
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2009-1302
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-1302
请登录查看更多情报信息。
Vendor Advisories for CVE-2009-1302 (28)
-
http://www.mozilla.org/security/announce/2009/mfsa2009-14.html x_refsource_CONFIRM
-
https://bugzilla.mozilla.org/show_bug.cgi?id=432114 x_refsource_CONFIRM
-
https://bugzilla.mozilla.org/show_bug.cgi?id=477775 x_refsource_CONFIRM
-
-
https://bugzilla.mozilla.org/show_bug.cgi?id=454276 x_refsource_CONFIRM
-
https://bugzilla.mozilla.org/show_bug.cgi?id=462517 x_refsource_CONFIRM
-
https://bugzilla.mozilla.org/show_bug.cgi?id=483444 x_refsource_CONFIRM
-
https://bugzilla.mozilla.org/show_bug.cgi?id=428113 x_refsource_CONFIRM
-
https://bugzilla.mozilla.org/show_bug.cgi?id=467881 x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
-
-
-
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 vendor-advisory x_refsource_MANDRIVA
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7030 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6070 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6170 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10106 vdb-entry signature x_refsource_OVAL
Mailing List Discussions for CVE-2009-1302 (1)
-
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html vendor-advisory x_refsource_SUSE
Other References for CVE-2009-1302 (4)
-
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 vendor-advisory x_refsource_SUNALERT
-
-
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 vendor-advisory x_refsource_SLACKWARE
-
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html vendor-advisory x_refsource_FEDORA
Same Patch Batch · n/a · 2009-04-22 · 25 CVEs total
| CVE-2009-1308 | Mozilla Firefox 跨站脚本漏洞 | |
| CVE-2009-1360 | Linux Kernel 'inet6_hashtables.c'空指针引用拒绝服务漏洞 | |
| CVE-2009-1359 | Sun OpenSolaris 'SCTP sockets implementatio'本地拒绝服务漏洞 | |
| CVE-2009-1338 | Linux Kernel '/signal.c'本地拒绝服务漏洞 | |
| CVE-2009-1337 | Linux Kernel '/exit.c'验证本地权限提升漏洞 | |
| CVE-2009-1336 | Linux Kernel '/client.c' NFS文件名本地拒绝服务漏洞 | |
| CVE-2009-1362 | ChCounter 'administration/index.php'SQL注入漏洞 | |
| CVE-2009-1361 | GScripts.net DNS Tools 'dig.php'远程代码执行漏洞 | |
| CVE-2009-1312 | Mozilla Firefox javascript: URIs跨站脚本攻击漏洞 | |
| CVE-2009-1311 | Mozilla Firefox 信息泄露漏洞 | |
| CVE-2009-1310 | Mozilla Firefox 插件"MozSearch" 跨站脚本攻击漏洞 | |
| CVE-2009-1309 | Mozilla Firefox 跨站脚本攻击漏洞 | |
| CVE-2008-6743 | Shock-Therapy RSMScript Cookie多个脚本身份认证绕过和HTML注入漏洞 | |
| CVE-2009-1307 | Mozilla Firefox 应用view-source:URI 安全绕过和访问控制漏洞 | |
| CVE-2009-1306 | Mozilla Firefox 应用jar:URI 跨站脚本攻击漏洞 | |
| CVE-2009-1305 | Mozilla Firefox JavaScript引擎 内存崩溃和拒绝服务攻击漏洞 | |
| CVE-2009-1304 | Mozilla Firefox 浏览器引擎 内存崩溃和拒绝服务攻击漏洞 | |
| CVE-2009-1303 | Mozilla Firefox 浏览器引擎 内存崩溃和拒绝服务攻击漏洞 | |
| CVE-2009-0307 | Rim BlackBerry Enterprise Server (BES) 'ConfigureStatistics'脚本跨站脚本漏洞漏洞 | |
| CVE-2009-1370 | Xilisoft Video Converter Wizard CUE 'ape_plugin.plg'文件解析栈溢出漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-101083
PMWeb encryptionhelper.dll information disclosure -
CVE-2026-101082
PMWeb downloader.aspx path traversal -
CVE-2026-101070
dbgate Files Endpoint runners.js files path traversal -
CVE-2026-101069
dbgate Export databaseConnections.js exportModelSql path tra -
CVE-2026-101068
dbgate Create Connection Endpoint zipJsonLinesData.js zipJso
V. Comments for CVE-2009-1302
No comments yet