10
CVSSv2

CVE-2009-2468

Published: 22/07/2009 Updated: 16/09/2009
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Integer overflow in Apple CoreGraphics, as used in Safari prior to 4.0.3, Mozilla Firefox prior to 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 2.0.0.12

mozilla firefox 3.0.1

mozilla firefox 2.0

mozilla firefox 0.9.3

mozilla firefox 0.9

mozilla firefox 1.0.2

mozilla firefox 1.0.8

mozilla firefox 2.0.0.21

mozilla firefox 2.0.0.15

mozilla firefox 0.6.1

mozilla firefox 0.6

mozilla firefox 0.1

mozilla firefox 3.0.9

mozilla firefox 2.0.0.7

mozilla firefox 1.5.0.12

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.9

mozilla firefox 1.5.7

mozilla firefox 1.5.6

mozilla firefox 2.0.0.2

mozilla firefox 3.0.2

mozilla firefox 3.0.6

mozilla firefox 3.0.10

mozilla firefox 3.0

mozilla firefox 0.8

mozilla firefox 0.10.1

mozilla firefox 3.0.5

mozilla firefox 2.0.0.20

mozilla firefox 1.0.7

mozilla firefox 1.0.6

mozilla firefox 2.0.0.10

mozilla firefox 2.0.0.16

mozilla firefox 1.0

mozilla firefox 0.3

mozilla firefox 1.5.0.5

mozilla firefox 1.5.0.2

mozilla firefox 1.5.3

mozilla firefox 1.5.4

mozilla firefox 1.5

mozilla firefox 2.0.0.5

mozilla firefox 2.0.0.4

mozilla firefox 3.0.3

mozilla firefox 3.0.4

mozilla firefox 2.0.0.18

mozilla firefox 2.0.0.14

mozilla firefox 0.9.1

mozilla firefox 1.0.3

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.11

mozilla firefox 1.4.1

mozilla firefox 0.4

mozilla firefox 0.5

mozilla firefox 1.5.0.3

mozilla firefox 1.5.0.11

mozilla firefox 1.5.1

mozilla firefox 1.5.2

mozilla firefox 1.8

mozilla firefox 1.5.8

mozilla firefox 2.0.0.3

mozilla firefox 0.9_rc

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.13

mozilla firefox

mozilla firefox 2.0.0.19

mozilla firefox 0.10

mozilla firefox 0.9.2

mozilla firefox 1.0.1

mozilla firefox 1.0.5

mozilla firefox 1.0.4

mozilla firefox 3.0.7

mozilla firefox 2.0.0.17

mozilla firefox 0.7

mozilla firefox 0.7.1

mozilla firefox 0.2

mozilla firefox 1.5.0.4

mozilla firefox 1.5.0.1

mozilla firefox 1.5.0.10

mozilla firefox 1.5.0.6

mozilla firefox 1.5.0.7

mozilla firefox 1.5.5

mozilla firefox 2.0.0.6

mozilla firefox 2.0.0.1

mozilla firefox 3.0.8

Vendor Advisories

Mozilla Foundation Security Advisory 2009-36 Heap/integer overflows in font glyph rendering libraries Announced July 21, 2009 Reporter Will Drewry Impact Critical Products Firefox Fixed in ...