CVE-2009-2468 Integer overflow in n/a
Remote attackers can trigger a heap-based buffer overflow via crafted text, leading to application crashes or arbitrary code execution in browsers and OS components.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-2468?
CVE-2009-2468 is a critical vulnerability in Mozilla Firefox, published on 22 Jul 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.
Weakness: CWE-189
Which versions are affected by CVE-2009-2468?
It affects 1 product.
Products include Mozilla Firefox.
How do I fix CVE-2009-2468?
No fix has been published for CVE-2009-2468 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-2468 being exploited?
There is no known exploitation of CVE-2009-2468 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-2fgv-c9q9-5wwh.