firefox: arbitrary code execution

Package(s):

firefox

CVE #(s):

CVE-2009-1313

Created:

April 28, 2009

Updated:

May 13, 2009

Description:

From the Red Hat advisory: A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox.

Alerts:

Gentoo	201301-01	firefox	2013-01-07
Mandriva	MDVSA-2009:111	firefox	2009-05-12
Ubuntu	USN-765-1	firefox-3.0, xulrunner-1.9	2009-04-28
Fedora	FEDORA-2009-4083	gnome-web-photo	2009-04-28
Fedora	FEDORA-2009-4083	kazehakase	2009-04-28
Fedora	FEDORA-2009-4083	devhelp	2009-04-28
Fedora	FEDORA-2009-4083	pcmanx-gtk2	2009-04-28
Fedora	FEDORA-2009-4083	mugshot	2009-04-28
Fedora	FEDORA-2009-4083	perl-Gtk2-MozEmbed	2009-04-28
Fedora	FEDORA-2009-4083	blam	2009-04-28
Fedora	FEDORA-2009-4083	yelp	2009-04-28
Fedora	FEDORA-2009-4083	galeon	2009-04-28
Fedora	FEDORA-2009-4083	ruby-gnome2	2009-04-28
Fedora	FEDORA-2009-4083	xulrunner	2009-04-28
Fedora	FEDORA-2009-4083	Miro	2009-04-28
Fedora	FEDORA-2009-4083	gecko-sharp2	2009-04-28
Fedora	FEDORA-2009-4083	mozvoikko	2009-04-28
Fedora	FEDORA-2009-4083	epiphany	2009-04-28
Fedora	FEDORA-2009-4083	google-gadgets	2009-04-28
Fedora	FEDORA-2009-4083	gnome-python2-extras	2009-04-28
Fedora	FEDORA-2009-4083	firefox	2009-04-28
Fedora	FEDORA-2009-4078	chmsee	2009-04-28
Fedora	FEDORA-2009-4078	mugshot	2009-04-28
Fedora	FEDORA-2009-4078	galeon	2009-04-28
Fedora	FEDORA-2009-4078	yelp	2009-04-28
Fedora	FEDORA-2009-4078	google-gadgets	2009-04-28
Fedora	FEDORA-2009-4078	mozvoikko	2009-04-28
Fedora	FEDORA-2009-4078	gtkmozembedmm	2009-04-28
Fedora	FEDORA-2009-4078	epiphany	2009-04-28
Fedora	FEDORA-2009-4078	blam	2009-04-28
Fedora	FEDORA-2009-4078	totem	2009-04-28
Fedora	FEDORA-2009-4078	xulrunner	2009-04-28
Fedora	FEDORA-2009-4078	gnome-web-photo	2009-04-28
Fedora	FEDORA-2009-4078	kazehakase	2009-04-28
Fedora	FEDORA-2009-4078	Miro	2009-04-28
Fedora	FEDORA-2009-4078	evolution-rss	2009-04-28
Fedora	FEDORA-2009-4078	epiphany-extensions	2009-04-28
Fedora	FEDORA-2009-4078	gnome-python2-extras	2009-04-28
Fedora	FEDORA-2009-4078	ruby-gnome2	2009-04-28
Fedora	FEDORA-2009-4078	devhelp	2009-04-28
Fedora	FEDORA-2009-4078	firefox	2009-04-28
CentOS	CESA-2009:0449	firefox	2009-04-28
Red Hat	RHSA-2009:0449-01	firefox	2009-04-27

firefox: arbitrary code execution

Posted May 1, 2009 23:41 UTC (Fri) by vonbrand (subscriber, #4458) [Link] (1 responses)

Why are the Fedora advisories listed several times? Scared me (longtime Fedora user) a boatload until I noticed...

firefox: arbitrary code execution

Posted May 2, 2009 0:27 UTC (Sat) by jake (editor, #205) [Link]

> Why are the Fedora advisories listed several times?

well, the problem is that Fedora reuses the same ID for all of the cascading advisories that result from a Firefox update. If you click through, you will see that each entry is for a separate package, but each has the same ID.

jake