CVE-2009-2470

Publication date 4 August 2009

Last updated 24 July 2024


Ubuntu priority

Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.

Status

Package Ubuntu Release Status
firefox 10.04 LTS lucid
Not affected
9.10 karmic Not in release
9.04 jaunty Not in release
8.10 intrepid Not in release
8.04 LTS hardy
Not affected
6.06 LTS dapper Ignored end of life
xulrunner-1.9 10.04 LTS lucid Not in release
9.10 karmic Not in release
9.04 jaunty
Not affected
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper Not in release
xulrunner-1.9.1 10.04 LTS lucid Not in release
9.10 karmic
Not affected
9.04 jaunty
Fixed 1.9.1.3+build1+nobinonly-0ubuntu0.9.04.2
8.10 intrepid Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release