CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

• CWE-94

• http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/
• http://isc.sans.org/diary.html?storyid=6796
• http://secunia.com/advisories/35798Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1
• http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html
• http://www.exploit-db.com/exploits/9137
• http://www.exploit-db.com/exploits/9181
• http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761
• http://www.kb.cert.org/vuls/id/443060US Government Resource
• http://www.mozilla.org/security/announce/2009/mfsa2009-41.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/35660Exploit
• http://www.vupen.com/english/advisories/2009/1868Patch, Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=503286
• https://www.exploit-db.com/exploits/40936/
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html
• http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/
• http://isc.sans.org/diary.html?storyid=6796
• http://secunia.com/advisories/35798Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1
• http://voices.washingtonpost.com/securityfix/2009/07/stopgap_fix_for_critical_firef.html
• http://www.exploit-db.com/exploits/9137
• http://www.exploit-db.com/exploits/9181
• http://www.h-online.com/security/First-Zero-Day-Exploit-for-Firefox-3-5--/news/113761
• http://www.kb.cert.org/vuls/id/443060US Government Resource
• http://www.mozilla.org/security/announce/2009/mfsa2009-41.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/35660Exploit
• http://www.vupen.com/english/advisories/2009/1868Patch, Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=503286
• https://www.exploit-db.com/exploits/40936/
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html

Published

Jul 15, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2471The setTimeout function in Mozilla Firefox before 3.0.12 doe…
• CVE-2009-2472Mozilla Firefox before 3.0.12 does not always use XPCCrossOr…
• CVE-2009-2473neon before 0.28.6, when expat is used, does not properly de…
• CVE-2009-2474neon before 0.28.6, when OpenSSL or GnuTLS is used, does not…
• CVE-2009-2475Sun Java SE 5.0 before Update 20 and 6 before Update 15, and…
• CVE-2009-2476The Java Management Extensions (JMX) implementation in Sun J…
• CVE-2009-2478Mozilla Firefox 3.5 allows remote attackers to cause a denia…
• CVE-2009-2479Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remo…
• CVE-2009-2480Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in…
• CVE-2009-2481mt-wizard.cgi in Six Apart Movable Type before 4.261, when g…
• CVE-2009-2482The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 an…
• CVE-2009-2483libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 all…