CVE-2009-1044
mozilla firefox: no CVSS score yet. EPSS 6.5% chance of exploitation in the next 30 days.
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
- EPSS
- 6.5% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mozilla:firefox
References
- http://blogs.zdnet.com/security/?p=2934
- http://blogs.zdnet.com/security/?p=2941
- http://cansecwest.com/index.html
- http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009
- http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits