Lucene search

K
cve[email protected]CVE-2009-2467
HistoryJul 22, 2009 - 6:30 p.m.

CVE-2009-2467

2009-07-2218:30:00
NVD-CWE-Other
web.nvd.nist.gov
51
cve-2009-2467
mozilla firefox
remote attack
denial of service
code execution
flash plugin

9.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.329 Low

EPSS

Percentile

97.0%

Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object.

9.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.329 Low

EPSS

Percentile

97.0%