CVE:CVE-2009-0772
CNNVD:CNNVD-200903-088
Firefox是Mozilla推出的浏览器软件。
Firefox、Thunderbird和SeaMonkey的布局引擎存在拒绝服务和任意代码执行漏洞。远程攻击者可以利用与nsCSSStyleSheet::GetOwnerNode，事件和碎片收集进程相关的向量造成拒绝服务攻击或可能执行任意代码。
solution:Upgrade mozilla firefox to a higher version than 3.0.6,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,and avoid the version (,3.0.6],1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,2.0.0.20,3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5; Upgrade mozilla seamonkey to a higher version than 1.1.14,1.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,and avoid the version (,1.1.14],1.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13; Upgrade mozilla thunderbird to a higher version than 2.0.0.20,2.0.0.0,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.9,2.0.0.12,2.0.0.14,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19,and avoid the version (,2.0.0.20],2.0.0.0,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.9,2.0.0.12,2.0.0.14,2.0.0.16,2.0.0.17,2.0.0.18,2.0.0.19