---
title: "CVE-2009-1834\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2009-1834?format=md
keywords: index, follow
---

# CVE-2009-1834

Publication date 12 June 2009

Last updated 24 July 2024

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in
Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote
attackers to spoof the location bar via an IDN with invalid Unicode
characters that are displayed as whitespace, as demonstrated by the \u115A
through \u115E characters.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| firefox | 9.10 karmic | Not in release |
| 9.04 jaunty | Not in release |
| 8.10 intrepid | Not in release |
| 8.04 LTS hardy | Not affected |
| 6.06 LTS dapper | Ignored end of life |
| seamonkey | 9.10 karmic | Fixed 1.1.17+nobinonly-0ubuntu1 |
| 9.04 jaunty | Fixed 1.1.17+nobinonly-0ubuntu0.9.04.1 |
| 8.10 intrepid | Fixed 1.1.17+nobinonly-0ubuntu0.8.10.1 |
| 8.04 LTS hardy | Fixed 1.1.17+nobinonly-0ubuntu0.8.04.1 |
| 6.06 LTS dapper | Not in release |
| xulrunner-1.9 | 9.10 karmic | Not in release |
| 9.04 jaunty | Fixed 1.9.0.11+build2+nobinonly-0ubuntu0.9.04.1 |
| 8.10 intrepid | Fixed 1.9.0.11+build2+nobinonly-0ubuntu0.8.10.2 |
| 8.04 LTS hardy | Fixed 1.9.0.11+build2+nobinonly-0ubuntu0.8.04.1 |
| 6.06 LTS dapper | Not in release |
| xulrunner-1.9.1 | 9.10 karmic | Fixed 1.9.1~rc2+nobinonly-0ubuntu1 |
| 9.04 jaunty | Fixed 1.9.1+nobinonly-0ubuntu0.9.04.1 |
| 8.10 intrepid | Not in release |
| 8.04 LTS hardy | Not in release |
| 6.06 LTS dapper | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1834)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2009-1834)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2009-1834)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2009-1834)

### Related Ubuntu Security Notices (USN)

+ [USN-779-1](https://usn.ubuntu.com/USN-779-1)
+ Firefox and Xulrunner vulnerabilities
+ 12 June 2009

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2009-1834>