CVE-2009-2471 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-2471 Interim 1 11 2023-12-09T02:03:23Z current 2021-05-30T12:47:45Z 2023-12-09T02:03:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-2471 The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/72KFJ3BEWFJSYCSSNETAIIJLIIFKKEQU/#72KFJ3BEWFJSYCSSNETAIIJLIIFKKEQU E-Mail link for SUSE-SA:2009:039 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GDAESXTKPYJIRG7UHBRM72TBQAXZRYRT/#GDAESXTKPYJIRG7UHBRM72TBQAXZRYRT E-Mail link for SUSE-SA:2009:042 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server for SAP Applications 11 MozillaFirefox-3.0.12-0.1.2 MozillaFirefox-branding-SLED-3.5-1.1.5 MozillaFirefox-translations-3.0.12-0.1.2 gconf2-2.24.0-7.5 gconf2-32bit-2.24.0-7.5 gconf2-x86-2.24.0-7.5 libfreebl3-3.12.3.1-1.2.1 libfreebl3-32bit-3.12.3.1-1.2.1 libfreebl3-x86-3.12.3.1-1.2.1 libidl-0.8.11-2.14 libidl-32bit-0.8.11-2.14 libidl-x86-0.8.11-2.14 mozilla-nspr-32bit-4.8-1.3.1 mozilla-nspr-4.8-1.3.1 mozilla-nspr-x86-4.8-1.3.1 mozilla-nss-3.12.3.1-1.2.1 mozilla-nss-32bit-3.12.3.1-1.2.1 mozilla-nss-tools-3.12.3.1-1.2.1 mozilla-nss-x86-3.12.3.1-1.2.1 mozilla-xulrunner190-1.9.0.12-1.1.1 mozilla-xulrunner190-1.9.0.19-0.1.1 mozilla-xulrunner190-32bit-1.9.0.12-1.1.1 mozilla-xulrunner190-32bit-1.9.0.19-0.1.1 mozilla-xulrunner190-gnomevfs-1.9.0.12-1.1.1 mozilla-xulrunner190-gnomevfs-1.9.0.19-0.1.1 mozilla-xulrunner190-translations-1.9.0.12-1.1.1 mozilla-xulrunner190-translations-1.9.0.19-0.1.1 mozilla-xulrunner190-x86-1.9.0.12-1.1.1 mozilla-xulrunner190-x86-1.9.0.19-0.1.1 mozilla-xulrunner191-1.9.1.11-0.1.1 mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 mozilla-xulrunner191-translations-1.9.1.11-0.1.1 mozilla-xulrunner191-x86-1.9.1.11-0.1.1 mozilla-xulrunner192-1.9.2.12-0.6.1 mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 mozilla-xulrunner192-translations-1.9.2.12-0.6.1 mozilla-xulrunner192-x86-1.9.2.12-0.6.1 orbit2-2.14.16-2.16 orbit2-32bit-2.14.16-2.16 orbit2-x86-2.14.16-2.16 MozillaFirefox-3.0.12-0.1.2 as a component of SUSE Linux Enterprise Server 11 MozillaFirefox-branding-SLED-3.5-1.1.5 as a component of SUSE Linux Enterprise Server 11 MozillaFirefox-translations-3.0.12-0.1.2 as a component of SUSE Linux Enterprise Server 11 gconf2-2.24.0-7.5 as a component of SUSE Linux Enterprise Server 11 gconf2-32bit-2.24.0-7.5 as a component of SUSE Linux Enterprise Server 11 gconf2-x86-2.24.0-7.5 as a component of SUSE Linux Enterprise Server 11 libfreebl3-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 libfreebl3-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 libfreebl3-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 libidl-0.8.11-2.14 as a component of SUSE Linux Enterprise Server 11 libidl-32bit-0.8.11-2.14 as a component of SUSE Linux Enterprise Server 11 libidl-x86-0.8.11-2.14 as a component of SUSE Linux Enterprise Server 11 mozilla-nspr-4.8-1.3.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nspr-32bit-4.8-1.3.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nspr-x86-4.8-1.3.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-tools-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-nss-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-32bit-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-gnomevfs-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-translations-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-x86-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-translations-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner191-x86-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-translations-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner192-x86-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server 11 orbit2-2.14.16-2.16 as a component of SUSE Linux Enterprise Server 11 orbit2-32bit-2.14.16-2.16 as a component of SUSE Linux Enterprise Server 11 orbit2-x86-2.14.16-2.16 as a component of SUSE Linux Enterprise Server 11 mozilla-xulrunner190-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-32bit-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-gnomevfs-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-translations-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 mozilla-xulrunner190-x86-1.9.0.19-0.1.1 as a component of SUSE Linux Enterprise Server 11 SP1 MozillaFirefox-3.0.12-0.1.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 MozillaFirefox-branding-SLED-3.5-1.1.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 MozillaFirefox-translations-3.0.12-0.1.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gconf2-2.24.0-7.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gconf2-32bit-2.24.0-7.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 gconf2-x86-2.24.0-7.5 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libfreebl3-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libfreebl3-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libfreebl3-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libidl-0.8.11-2.14 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libidl-32bit-0.8.11-2.14 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libidl-x86-0.8.11-2.14 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nspr-4.8-1.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nspr-32bit-4.8-1.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nspr-x86-4.8-1.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-32bit-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-tools-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-nss-x86-3.12.3.1-1.2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-32bit-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-gnomevfs-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-translations-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner190-x86-1.9.0.12-1.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-translations-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner191-x86-1.9.1.11-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-translations-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mozilla-xulrunner192-x86-1.9.2.12-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 orbit2-2.14.16-2.16 as a component of SUSE Linux Enterprise Server for SAP Applications 11 orbit2-32bit-2.14.16-2.16 as a component of SUSE Linux Enterprise Server for SAP Applications 11 orbit2-x86-2.14.16-2.16 as a component of SUSE Linux Enterprise Server for SAP Applications 11 The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper. CVE-2009-2471 SUSE Linux Enterprise Server 11:MozillaFirefox-3.0.12-0.1.2 SUSE Linux Enterprise Server 11:MozillaFirefox-branding-SLED-3.5-1.1.5 SUSE Linux Enterprise Server 11:MozillaFirefox-translations-3.0.12-0.1.2 SUSE Linux Enterprise Server 11:gconf2-2.24.0-7.5 SUSE Linux Enterprise Server 11:gconf2-32bit-2.24.0-7.5 SUSE Linux Enterprise Server 11:gconf2-x86-2.24.0-7.5 SUSE Linux Enterprise Server 11:libfreebl3-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:libfreebl3-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:libfreebl3-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:libidl-0.8.11-2.14 SUSE Linux Enterprise Server 11:libidl-32bit-0.8.11-2.14 SUSE Linux Enterprise Server 11:libidl-x86-0.8.11-2.14 SUSE Linux Enterprise Server 11:mozilla-nspr-4.8-1.3.1 SUSE Linux Enterprise Server 11:mozilla-nspr-32bit-4.8-1.3.1 SUSE Linux Enterprise Server 11:mozilla-nspr-x86-4.8-1.3.1 SUSE Linux Enterprise Server 11:mozilla-nss-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-nss-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-nss-tools-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-nss-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-1.9.0.12-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-32bit-1.9.0.12-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-gnomevfs-1.9.0.12-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-translations-1.9.0.12-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner190-x86-1.9.0.12-1.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-translations-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner191-x86-1.9.1.11-0.1.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-translations-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:mozilla-xulrunner192-x86-1.9.2.12-0.6.1 SUSE Linux Enterprise Server 11:orbit2-2.14.16-2.16 SUSE Linux Enterprise Server 11:orbit2-32bit-2.14.16-2.16 SUSE Linux Enterprise Server 11:orbit2-x86-2.14.16-2.16 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-32bit-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-gnomevfs-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-translations-1.9.0.19-0.1.1 SUSE Linux Enterprise Server 11 SP1:mozilla-xulrunner190-x86-1.9.0.19-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:MozillaFirefox-3.0.12-0.1.2 SUSE Linux Enterprise Server for SAP Applications 11:MozillaFirefox-branding-SLED-3.5-1.1.5 SUSE Linux Enterprise Server for SAP Applications 11:MozillaFirefox-translations-3.0.12-0.1.2 SUSE Linux Enterprise Server for SAP Applications 11:gconf2-2.24.0-7.5 SUSE Linux Enterprise Server for SAP Applications 11:gconf2-32bit-2.24.0-7.5 SUSE Linux Enterprise Server for SAP Applications 11:gconf2-x86-2.24.0-7.5 SUSE Linux Enterprise Server for SAP Applications 11:libfreebl3-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:libfreebl3-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:libfreebl3-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:libidl-0.8.11-2.14 SUSE Linux Enterprise Server for SAP Applications 11:libidl-32bit-0.8.11-2.14 SUSE Linux Enterprise Server for SAP Applications 11:libidl-x86-0.8.11-2.14 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nspr-4.8-1.3.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nspr-32bit-4.8-1.3.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nspr-x86-4.8-1.3.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-32bit-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-tools-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-nss-x86-3.12.3.1-1.2.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-1.9.0.12-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-32bit-1.9.0.12-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-gnomevfs-1.9.0.12-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-translations-1.9.0.12-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner190-x86-1.9.0.12-1.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-32bit-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-gnomevfs-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-translations-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner191-x86-1.9.1.11-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-32bit-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-gnome-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-translations-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:mozilla-xulrunner192-x86-1.9.2.12-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11:orbit2-2.14.16-2.16 SUSE Linux Enterprise Server for SAP Applications 11:orbit2-32bit-2.14.16-2.16 SUSE Linux Enterprise Server for SAP Applications 11:orbit2-x86-2.14.16-2.16 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C