CVE:CVE-2009-1392
CNNVD:CNNVD-200906-225
Firefox是Mozilla所发布的开源WEB浏览器 。
Firefox中的多个安全漏洞,由于代码共享，Thunderbird和SeaMonkey也受这些漏洞的影响 。浏览器引擎中存在多个内存破坏引起的代码执行和拒绝服务攻击漏洞漏洞 。该漏洞与(1) nsEventStateManager::GetContentState 和nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames 和 ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor相关的未明向量有关。
solution:Upgrade mozilla firefox to a higher version than 3.0,3.0:alpha,3.0:beta2,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,and avoid the version 3.0,3.0:alpha,3.0:beta2,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10; Upgrade mozilla seamonkey to a higher version than 1.1.16,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.3,1.0.4,1.0.6,1.0.8,1.0.9,1.0.99,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.3,1.1.5,1.1.5:1.1.10,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.15,and avoid the version (,1.1.16],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.3,1.0.4,1.0.6,1.0.8,1.0.9,1.0.99,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.3,1.1.5,1.1.5:1.1.10,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.15; Upgrade mozilla thunderbird to a higher version than 2.0.0.19,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.0.13,1.5.0.14,1.5.1,1.5.2,1.7.1,1.7.3,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8,and avoid the version (,2.0.0.19],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.7.1,0.7.2,0.7.3,0.8,0.9,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.5:beta,1.0.6,1.0.7,1.0.8,1.5,1.5:beta2,1.5.0.1,1.5.0.2,1.5.0.3,1.5.0.4,1.5.0.5,1.5.0.6,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.11,1.5.0.12,1.5.0.13,1.5.0.14,1.5.1,1.5.2,1.7.1,1.7.3,2.0.0.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,2.0.0.15,2.0.0.16,2.0.0.17,2.0.0.18,2.0_.4,2.0_.5,2.0_.6,2.0_.9,2.0_.12,2.0_.13,2.0_.14,2.0_8