Lucene search

K
cve[email protected]CVE-2009-3372
HistoryOct 29, 2009 - 2:30 p.m.

CVE-2009-3372

2009-10-2914:30:00
NVD-CWE-Other
web.nvd.nist.gov
36
cve-2009-3372
mozilla firefox
seamonkey
code execution
crafted regular expression
nvd

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.082 Low

EPSS

Percentile

94.3%

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.082 Low

EPSS

Percentile

94.3%