← Database

CVE-2009-1837

HIGH CVSS: 7.5 Published: 2009-06-12 Modified: 2026-06-16

Description

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

Affected Platforms

Redhat Enterprise LinuxRedhat Enterprise Linux EusMozilla FirefoxRedhat Enterprise Linux WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerFedoraproject FedoraRedhat Enterprise Linux Server AusDebian Debian Linux

Weakness Type

CWE-362, CWE-416

References