← Database

CVE-2009-1044

CRITICAL CVSS: 9.3 Published: 2009-03-23 Modified: 2026-06-16

Description

Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

Affected Platforms

Mozilla FirefoxMicrosoft Windows 7

Weakness Type

CWE-399

References