CVE ID:	CVE-2009-1838
Description:	The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.
Test IDs:	1.3.6.1.4.1.25623.1.0.64254   1.3.6.1.4.1.25623.1.0.64417
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1838 1022397 http://www.securitytracker.com/id?1022397 264308 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 35326 http://www.securityfocus.com/bid/35326 35331 http://secunia.com/advisories/35331 35383 http://www.securityfocus.com/bid/35383 35415 http://secunia.com/advisories/35415 35428 http://secunia.com/advisories/35428 35431 http://secunia.com/advisories/35431 35439 http://secunia.com/advisories/35439 35440 http://secunia.com/advisories/35440 35468 http://secunia.com/advisories/35468 35536 http://secunia.com/advisories/35536 35561 http://secunia.com/advisories/35561 35602 http://secunia.com/advisories/35602 35882 http://secunia.com/advisories/35882 55157 http://osvdb.org/55157 ADV-2009-1572 http://www.vupen.com/english/advisories/2009/1572 DSA-1820 http://www.debian.org/security/2009/dsa-1820 DSA-1830 http://www.debian.org/security/2009/dsa-1830 FEDORA-2009-6366 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html FEDORA-2009-6411 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html FEDORA-2009-7567 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html FEDORA-2009-7614 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html MDVSA-2009:141 http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 RHSA-2009:1095 https://rhn.redhat.com/errata/RHSA-2009-1095.html RHSA-2009:1096 http://rhn.redhat.com/errata/RHSA-2009-1096.html RHSA-2009:1125 http://www.redhat.com/support/errata/RHSA-2009-1125.html RHSA-2009:1126 http://www.redhat.com/support/errata/RHSA-2009-1126.html SSA:2009-167-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 SSA:2009-176-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 SSA:2009-178-01 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 USN-782-1 http://www.ubuntu.com/usn/usn-782-1 http://www.mozilla.org/security/announce/2009/mfsa2009-29.html http://www.mozilla.org/security/announce/2009/mfsa2009-29.html https://bugzilla.mozilla.org/show_bug.cgi?id=489131 https://bugzilla.mozilla.org/show_bug.cgi?id=489131 https://bugzilla.redhat.com/show_bug.cgi?id=503580 https://bugzilla.redhat.com/show_bug.cgi?id=503580 oval:org.mitre.oval:def:11080 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080