Oval Definition:	oval:org.mitre.oval:def:11219
Revision Date: 2013-04-29 Version: 12 Title: layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Description: layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-3382 Platform(s): CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section nspr is earlier than 0:4.7.6-1.el4_8 OR firefox is earlier than 0:3.0.15-3.el4 OR nspr-devel is earlier than 0:4.7.6-1.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4 OR xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4 OR nspr is earlier than 0:4.7.6-1.el5_4 OR firefox is earlier than 0:3.0.15-3.el5_4 OR nspr-devel is earlier than 0:4.7.6-1.el5_4 OR xulrunner is earlier than 0:1.9.0.15-3.el5_4
BACK