← Database

CVE-2009-2464

CRITICAL CVSS: 10.0 Published: 2009-07-22 Modified: 2026-06-16

Description

The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.

Affected Platforms

Mozilla FirefoxMozilla SeamonkeyMozilla Thunderbird

Weakness Type

CWE-399

References