CVE-2009-1838 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-1838 Interim 1 11 2023-12-09T02:04:00Z current 2021-05-30T12:47:16Z 2023-12-09T02:04:00Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-1838 The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AM6N2SYSBGFFACHEM623LIZV564ZLY3L/#AM6N2SYSBGFFACHEM623LIZV564ZLY3L E-Mail link for SUSE-SA:2009:034 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server for SAP Applications 11 MozillaFirefox-3.0.11-0.1.1 MozillaFirefox-branding-SLED-3.5-1.1.5 MozillaFirefox-translations-3.0.11-0.1.1 gconf2-2.24.0-7.5 gconf2-32bit-2.24.0-7.5 gconf2-x86-2.24.0-7.5 libfreebl3-3.12.3.1-1.2.1 libfreebl3-32bit-3.12.3.1-1.2.1 libfreebl3-x86-3.12.3.1-1.2.1 libidl-0.8.11-2.14 libidl-32bit-0.8.11-2.14 libidl-x86-0.8.11-2.14 mozilla-nspr-32bit-4.8-1.3.1 mozilla-nspr-4.8-1.3.1 mozilla-nspr-x86-4.8-1.3.1 mozilla-nss-3.12.3.1-1.2.1 mozilla-nss-32bit-3.12.3.1-1.2.1 mozilla-nss-tools-3.12.3.1-1.2.1 mozilla-nss-x86-3.12.3.1-1.2.1 mozilla-xulrunner190-1.9.0.11-1.1.1 mozilla-xulrunner190-1.9.0.19-0.1.1 mozilla-xulrunner190-32bit-1.9.0.11-1.1.1 mozilla-xulrunner190-32bit-1.9.0.19-0.1.1 mozilla-xulrunner190-gnomevfs-1.9.0.11-1.1.1 mozilla-xulrunner190-gnomevfs-1.9.0.19-0.1.1 mozilla-xulrunner190-translations-1.9.0.11-1.1.1 mozilla-xulrunner190-translations-1.9.0.19-0.1.1 mozilla-xulrunner190-x86-1.9.0.11-1.1.1 mozilla-xulrunner190-x86-1.9.0.19-0.1.1 mozilla-xulrunner191-1.9.1.11-0.1.1 mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 mozilla-xulrunner191-translations-1.9.1.11-0.1.1 mozilla-xulrunner191-x86-1.9.1.11-0.1.1 mozilla-xulrunner192-1.9.2.12-0.6.1 mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 mozilla-xulrunner192-translations-1.9.2.12-0.6.1 mozilla-xulrunner192-x86-1.9.2.12-0.6.1 orbit2-2.14.16-2.16 orbit2-32bit-2.14.16-2.16 orbit2-x86-2.14.16-2.16 MozillaFirefox-3.0.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 MozillaFirefox-branding-SLED-3.5-1.1.5 as a component of SUSE Linux Enterprise Server 11 MozillaFirefox-translations-3.0.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 gconf2-2.24.0-7.5 as a component of SUSE Linux Enterprise Server 11 gconf2-32bit-2.24.0-7.5 as a component of SUSE Linux Enterprise Server 11 gconf2-x86-2.24.0-7.5 as a component of SUSE Linux Enterprise Server 11 libfreebl3-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 libfreebl3-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 libfreebl3-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 libidl-0.8.11-2.14 as a component of SUSE Linux Enterprise Server 11 libidl-32bit-0.8.11-2.14 as a component of SUSE Linux Enterprise Server 11 libidl-x86-0.8.11-2.14 as a component of SUSE Linux Enterprise Server 11 mozilla-nspr-4.8-1.3.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nspr-32bit-4.8-1.3.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nspr-x86-4.8-1.3.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-tools-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-32bit-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-gnomevfs-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-translations-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-x86-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-translations-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-x86-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-translations-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-x86-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 orbit2-2.14.16-2.16 as a component of SUSE Linux Enterprise Server 11 orbit2-32bit-2.14.16-2.16 as a component of SUSE Linux Enterprise Server 11 orbit2-x86-2.14.16-2.16 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-32bit-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-gnomevfs-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-translations-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-x86-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 MozillaFirefox-3.0.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 MozillaFirefox-branding-SLED-3.5-1.1.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 MozillaFirefox-translations-3.0.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gconf2-2.24.0-7.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gconf2-32bit-2.24.0-7.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gconf2-x86-2.24.0-7.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libfreebl3-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libfreebl3-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libfreebl3-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libidl-0.8.11-2.14 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libidl-32bit-0.8.11-2.14 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libidl-x86-0.8.11-2.14 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nspr-4.8-1.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nspr-32bit-4.8-1.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nspr-x86-4.8-1.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-tools-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-32bit-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-gnomevfs-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-translations-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-x86-1.9.0.11-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-translations-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-x86-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-translations-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-x86-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 orbit2-2.14.16-2.16 as a component of SUSE Linux Enterprise Server for SAP Applications 11 orbit2-32bit-2.14.16-2.16 as a component of SUSE Linux Enterprise Server for SAP Applications 11 orbit2-x86-2.14.16-2.16 as a component of SUSE Linux Enterprise Server for SAP Applications 11 The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler. CVE-2009-1838 SUSE Linux Enterprise Server 11:MozillaFirefox-3.0.11-0.1.1 SUSE Linux Enterprise Server 11:MozillaFirefox-branding-SLED-3.5-1.1.5 SUSE Linux Enterprise Server 11:MozillaFirefox-translations-3.0.11-0.1.1 SUSE Linux Enterprise Server 11:gconf2-2.24.0-7.5 SUSE Linux Enterprise Server 11:gconf2-32bit-2.24.0-7.5 SUSE Linux Enterprise Server 11:gconf2-x86-2.24.0-7.5 SUSE Linux Enterprise Server 11:libfreebl3-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:libfreebl3-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:libfreebl3-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:libidl-0.8.11-2.14 SUSE Linux Enterprise Server 11:libidl-32bit-0.8.11-2.14 SUSE Linux Enterprise Server 11:libidl-x86-0.8.11-2.14 SUSE Linux Enterprise Server 11:mozilla-nspr-4.8-1.3.1 SUSE Linux Enterprise Server 11:mozilla-nspr-32bit-4.8-1.3.1 SUSE Linux Enterprise Server 11:mozilla-nspr-x86-4.8-1.3.1 SUSE Linux Enterprise Server 11:mozilla-nss-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-nss-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-nss-tools-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-nss-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-1.9.0.11-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-32bit-1.9.0.11-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-gnomevfs-1.9.0.11-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-translations-1.9.0.11-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-x86-1.9.0.11-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-translations-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-x86-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-translations-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-x86-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:orbit2-2.14.16-2.16 SUSE Linux Enterprise Server 11:orbit2-32bit-2.14.16-2.16 SUSE Linux Enterprise Server 11:orbit2-x86-2.14.16-2.16 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-32bit-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-gnomevfs-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-translations-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-x86-1.9.0.19-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:MozillaFirefox-3.0.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:MozillaFirefox-branding-SLED-3.5-1.1.5 SUSE Linux Enterprise Server for SAP Applications 11:MozillaFirefox-translations-3.0.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:gconf2-2.24.0-7.5 SUSE Linux Enterprise Server for SAP Applications 11:gconf2-32bit-2.24.0-7.5 SUSE Linux Enterprise Server for SAP Applications 11:gconf2-x86-2.24.0-7.5 SUSE Linux Enterprise Server for SAP Applications 11:libfreebl3-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:libfreebl3-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:libfreebl3-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:libidl-0.8.11-2.14 SUSE Linux Enterprise Server for SAP Applications 11:libidl-32bit-0.8.11-2.14 SUSE Linux Enterprise Server for SAP Applications 11:libidl-x86-0.8.11-2.14 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nspr-4.8-1.3.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nspr-32bit-4.8-1.3.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nspr-x86-4.8-1.3.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-tools-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-1.9.0.11-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-32bit-1.9.0.11-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-gnomevfs-1.9.0.11-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-translations-1.9.0.11-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-x86-1.9.0.11-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-translations-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-x86-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-translations-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-x86-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:orbit2-2.14.16-2.16 SUSE Linux Enterprise Server for SAP Applications 11:orbit2-32bit-2.14.16-2.16 SUSE Linux Enterprise Server for SAP Applications 11:orbit2-x86-2.14.16-2.16 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C