Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0821
HistoryMar 05, 2009 - 12:00 a.m.

CVE-2009-0821

2009-03-0500:00:00
ubuntu.com
ubuntu.com
12

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.098

Percentile

95.0%

Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a
denial of service (application crash) via nested calls to the window.print
function, as demonstrated by a window.print(window.print()) in the onclick
attribute of an INPUT element.

Notes

Author Note
jdstrand browser crash only
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchxulrunner< 1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner< 1.8.1.18+nobinonly.b308.cvs20090331t155113-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchxulrunner< 1.8.1.16+nobinonly-0ubuntu1UNKNOWN
ubuntu9.10noarchxulrunner< 1.8.1.16+nobinonly-0ubuntu1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.098

Percentile

95.0%