CVE Database
/

CVE-2009-1169

Back to search

CVE-2009-1169

Published: Mar 27, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SA:2009:023
vendor-advisory
x_refsource_SUSE
mozilla-xslt-code-execution(49439)
vdb-entry
x_refsource_XF
34510
third-party-advisory
x_refsource_SECUNIA
8285
exploit
x_refsource_EXPLOIT-DB
FEDORA-2009-3101
vendor-advisory
x_refsource_FEDORA
34511
third-party-advisory
x_refsource_SECUNIA
MDVSA-2009:084
vendor-advisory
x_refsource_MANDRIVA
RHSA-2009:0397
vendor-advisory
x_refsource_REDHAT
SUSE-SA:2009:022
vendor-advisory
x_refsource_SUSE
1021939
vdb-entry
x_refsource_SECTRACK
34505
third-party-advisory
x_refsource_SECUNIA
34521
third-party-advisory
x_refsource_SECUNIA
RHSA-2009:0398
vendor-advisory
x_refsource_REDHAT
34486
third-party-advisory
x_refsource_SECUNIA
34471
third-party-advisory
x_refsource_SECUNIA
USN-745-1
vendor-advisory
x_refsource_UBUNTU
34527
third-party-advisory
x_refsource_SECUNIA
34235
vdb-entry
x_refsource_BID
DSA-1756
vendor-advisory
x_refsource_DEBIAN
ADV-2009-0853
vdb-entry
x_refsource_VUPEN
34792
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-3100
vendor-advisory
x_refsource_FEDORA
34549
third-party-advisory
x_refsource_SECUNIA
34550
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:11372
vdb-entry
signature
x_refsource_OVAL
FEDORA-2009-3099
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now