CVE-2009-1392: mozilla firefox Improper Control of Generation of Code

Modified

Published 12-06-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-1392 is a high (CVSS 9.3) Improper Control of Generation of Code vulnerability in mozilla firefox. EPSS estimates a 9.28% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities. 11 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

9.28%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits11reference

Advisory lineage

Upstream 0 · Downstream 6

DSA-1820-1 DSA-1830-1 RHSA-2009:1095 RHSA-2009:1096 RHSA-2009:1125 RHSA-2009:1126

Timeline

12-06-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

9.28%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

No change 0.00 pp

From 9.28% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

11 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Show all 11 exploits

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of CodeThe product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Mozilla3 products

firefox3.0 | 3.0:alpha | 3.0:beta2 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10
seamonkey≤ 1.1.16 | 1.0 | 1.0:alpha | 1.0:beta | 1.0.1 | 1.0.3 | 1.0.4 | 1.0.6 | 1.0.8 | 1.0.9 | 1.0.99 | 1.1 | 1.1:alpha | 1.1:beta | 1.1.1 | 1.1.3 | 1.1.5 | 1.1.5:1.1.10 | 1.1.6 | 1.1.7 | 1.1.8 | 1.1.9 | 1.1.10 | 1.1.11 | 1.1.12 | 1.1.13 | 1.1.15
thunderbird≤ 2.0.0.19 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.7 | 0.7.1 | 0.7.2 | 0.7.3 | 0.8 | 0.9 | 1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.5:beta | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7 | 1.5.0.8 | 1.5.0.9 | 1.5.0.10 | 1.5.0.11 | 1.5.0.12 | 1.5.0.13 | 1.5.0.14 | 1.5.1 | 1.5.2 | 1.7.1 | 1.7.3 | 2.0.0.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.7 | 2.0.0.8 | 2.0.0.9 | 2.0.0.11 | 2.0.0.12 | 2.0.0.13 | 2.0.0.14 | 2.0.0.15 | 2.0.0.16 | 2.0.0.17 | 2.0.0.18 | 2.0_.4 | 2.0_.5 | 2.0_.6 | 2.0_.9 | 2.0_.12 | 2.0_.13 | 2.0_.14 | 2.0_8

1 vendor · 3 products

References

49 links

sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2009/1572VDB EntryX Refsource VUPENPatchVendor Advisory
rhn.redhat.com/errata/RHSA-2009-1096.htmlVendor AdvisoryX Refsource REDHATPatch
sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1Vendor AdvisoryX Refsource SUNALERT
www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275Vendor AdvisoryX Refsource SLACKWARE
www.debian.org/security/2009/dsa-1830Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/35536Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35602Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=490410X Refsource CONFIRMExploit
bugzilla.mozilla.org/show_bug.cgi?id=451341X Refsource CONFIRMExploit

Show all 49 references

www.redhat.com/support/errata/RHSA-2009-1125.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/35326VDB EntryX Refsource BID
bugzilla.mozilla.org/show_bug.cgi?id=429969X Refsource CONFIRMExploit
bugzilla.mozilla.org/show_bug.cgi?id=489041X Refsource CONFIRMExploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/35370VDB EntryX Refsource BID
osvdb.org/55145VDB EntryX Refsource OSVDB
secunia.com/advisories/35440Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.htmlVendor AdvisoryX Refsource FEDORA
www.ubuntu.com/usn/usn-782-1Vendor AdvisoryX Refsource UBUNTU
osvdb.org/55147VDB EntryX Refsource OSVDB
secunia.com/advisories/35428Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/35431Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/35331Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/35468Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/2152VDB EntryX Refsource VUPEN
secunia.com/advisories/35439Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.htmlVendor AdvisoryX Refsource FEDORA
www.mandriva.com/security/advisories?name=MDVSA-2009:141Vendor AdvisoryX Refsource MANDRIVA
osvdb.org/55144VDB EntryX Refsource OSVDB
osvdb.org/55146VDB EntryX Refsource OSVDB
secunia.com/advisories/35415Third Party AdvisoryX Refsource SECUNIA
bugzilla.mozilla.org/show_bug.cgi?id=432068X Refsource CONFIRMExploit
bugzilla.mozilla.org/show_bug.cgi?id=490425X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2009-1095.htmlVendor AdvisoryX Refsource REDHATPatch
bugzilla.mozilla.org/show_bug.cgi?id=380359X Refsource CONFIRMExploit
bugzilla.mozilla.org/show_bug.cgi?id=490513X Refsource CONFIRMExploit
bugzilla.redhat.com/show_bug.cgi?id=503568X Refsource CONFIRMExploit
securitytracker.com/id?1022376VDB EntryX Refsource SECTRACKPatch
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468Vendor AdvisoryX Refsource SLACKWARE
bugzilla.mozilla.org/show_bug.cgi?id=486398X Refsource CONFIRMExploit
secunia.com/advisories/35561Third Party AdvisoryX Refsource SECUNIA
www.mozilla.org/security/announce/2009/mfsa2009-24.htmlX Refsource CONFIRMVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408Vendor AdvisoryX Refsource SLACKWARE
bugzilla.mozilla.org/show_bug.cgi?id=431086X Refsource CONFIRMExploit
bugzilla.mozilla.org/show_bug.cgi?id=472776X Refsource CONFIRMExploit
www.debian.org/security/2009/dsa-1820Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2009-1126.htmlVendor AdvisoryX Refsource REDHAT
www.securitytracker.com/id?1022397VDB EntryX Refsource SECTRACK