CVE-2009-1571

2010-02-2213:00:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-1571

mozilla firefox

thunderbird

seamonkey

html parser

use-after-free vulnerability

remote code execution

nvd

9.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.151 Low

EPSS

Percentile

95.8%

JSON

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

CPENameOperatorVersion
mozilla:seamonkeymozilla seamonkeyeq1.1.10
mozilla:seamonkeymozilla seamonkeyeq1.0.3
mozilla:firefoxmozilla firefoxeq3.0.17
mozilla:firefoxmozilla firefoxeq3.5.3
mozilla:seamonkeymozilla seamonkeyeq1.1.8
mozilla:firefoxmozilla firefoxeq3.0.7
mozilla:seamonkeymozilla seamonkeyeq1.0.1
mozilla:seamonkeymozilla seamonkeyeq1.1.7
mozilla:firefoxmozilla firefoxeq3.0.9
mozilla:seamonkeymozilla seamonkeyeq1.0.6

CPE	Name	Operator	Version
mozilla:seamonkey	mozilla seamonkey	eq	1.1.10
mozilla:seamonkey	mozilla seamonkey	eq	1.0.3
mozilla:firefox	mozilla firefox	eq	3.0.17
mozilla:firefox	mozilla firefox	eq	3.5.3
mozilla:seamonkey	mozilla seamonkey	eq	1.1.8
mozilla:firefox	mozilla firefox	eq	3.0.7
mozilla:seamonkey	mozilla seamonkey	eq	1.0.1
mozilla:seamonkey	mozilla seamonkey	eq	1.1.7
mozilla:firefox	mozilla firefox	eq	3.0.9
mozilla:seamonkey	mozilla seamonkey	eq	1.0.6