NetSight
IP …
high7.5

CVE-2009-1837

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow r…

Impact

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

Affected products

VendorProductAffected versions
MozillaFirefox
from 3.0 before 3.0.11
DebianDebian Linux
Version 5.0
FedoraprojectFedora
Versions 9, 10
RedhatEnterprise Linux
Versions 4.0, 5.0
RedhatEnterprise Linux Desktop
Versions 4.0, 5.0
RedhatEnterprise Linux Eus
Versions 4.8, 5.3
RedhatEnterprise Linux Server
Versions 4.0, 5.0
RedhatEnterprise Linux Server Aus
Version 5.3
RedhatEnterprise Linux Workstation
Versions 4.0, 5.0

Weakness classification

CWE-362CWE-416

References