NetSight
IP …
medium5.0Public exploit code

CVE-2009-2535

Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and ap…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.

Affected products

VendorProductAffected versions
MozillaFirefox
through 2.0.0.18
Versions 0.1, 0.2, 0.4, 0.6, 0.6.1
MozillaSeamonkey
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MozillaThunderbird
through 2.0.0.18
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-189

References