CVE-2009-2477

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 42.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-07-15 · updated 2026-06-16
Weakness: CWE-94

Description

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Affected products

Mozilla Firefox: 3.5

References

http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/
http://isc.sans.org/diary.html?storyid=6796
http://secunia.com/advisories/35798
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1
http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html
http://www.exploit-db.com/exploits/9137
http://www.exploit-db.com/exploits/9181
http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761
http://www.kb.cert.org/vuls/id/443060
http://www.mozilla.org/security/announce/2009/mfsa2009-41.html
http://www.securityfocus.com/bid/35660
http://www.vupen.com/english/advisories/2009/1868

Get alerted when CVE-2009-2477 or the next vulnerability affects your stack