CVE:CVE-2009-0838
CNNVD:CNNVD-200903-162
Solaris是一款由Sun开发和维护的商业UNIX操作系统。
Solaris的加密伪设备驱动没有正确地释放内存，本地攻击者可以通过vmem_hash_delete函数导致系统忙碌。如果出现上述漏洞，系统可能出现类似于以下栈追踪的忙碌：
vmem_hash_delete(): bad free
vmem_hash_delete()
vmem_xfree()
object_get_attribute_value()
fop_ioctl()
ioctl()
solution:Upgrade sun opensolaris to a higher version than snv_88,snv_89,snv_90,snv_90:x86,snv_91,snv_92,snv_93,snv_94,snv_95,snv_96,snv_97,snv_98,snv_99,snv_100,snv_101,snv_101b,snv_102,and avoid the version snv_88,snv_89,snv_90,snv_90:x86,snv_91,snv_92,snv_93,snv_94,snv_95,snv_96,snv_97,snv_98,snv_99,snv_100,snv_101,snv_101b,snv_102; Upgrade sun sunos to a higher version than 5.10,and avoid the version 5.10
solution:Upgrade mozilla firefox to a higher version than 3.0,3.0:alpha,3.0:beta2,3.0:beta5,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,and avoid the version 3.0,3.0:alpha,3.0:beta2,3.0:beta5,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5