CVE-2009-1837

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow…

published June 12, 2009

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04331 · 91.1th percentile
Published
2009-06-12T21:07Z
EPSS history
Timeline
  • 12 JUN 21:07Z
    Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow…
    cvelistv5