Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-3382
HistoryOct 29, 2009 - 2:30 p.m.

CVE-2009-3382

2009-10-2914:30:01
[email protected]
web.nvd.nist.gov
39
mozilla
firefox
3.0.x
3.0.15
cve-2009-3382
browser engine
memory corruption
application crash
arbitrary code
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.89 High

EPSS

Percentile

98.7%

JSON

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Affected configurations

NVD
Node
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.0.14

Related

openvas 34
checkpoint_advisories 2
prion 1
nvd 1
ubuntucve 1
veracode 1
cvelist 1
securityvulns 2
mozilla 1
seebug 1
debian 1
osv 1
fedora 19
nessus 23
oraclelinux 1
redhat 1
centos 1
vmware 2
ubuntu 2
freebsd 1
suse 1
gentoo 1
openvas
openvas
Mozilla Firefox DoS Vulnerability (Nov 2009) - Windows
2009-11-02 00:00:00
Mozilla Firefox Denial Of Service Vulnerability Nov-09 (Linux)
2009-11-02 00:00:00
Mozilla Firefox Denial Of Service Vulnerability (Nov 2009) - Linux
2009-11-02 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Browser Engine Memory Corruption (CVE-2009-3382)
2010-03-11 00:00:00
Update Protection against Mozilla Firefox Browser Engine Memory Corruption
2010-03-25 00:00:00
prion
prion
Memory corruption
2009-10-29 14:30:00
nvd
nvd
CVE-2009-3382
2009-10-29 14:30:01
ubuntucve
ubuntucve
CVE-2009-3382
2009-10-29 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:38:58
cvelist
cvelist
CVE-2009-3382
2009-10-29 14:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-64
2009-10-28 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2009-11-05 00:00:00
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15) β€” Mozilla
2009-10-27 00:00:00
seebug
seebug
Mozilla Firefox倚δΈͺε†…ε­˜η ΄εζΌζ΄ž
2009-11-03 00:00:00
debian
debian
[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities
2009-10-28 21:13:30
osv
osv
xulrunner - several vulnerabilities
2009-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: google-gadgets-0.10.5-11.fc10
2009-11-04 12:31:06
[SECURITY] Fedora 10 Update: kazehakase-0.5.6-4.fc10.7
2009-11-04 12:31:06
[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-23.fc10
2009-11-04 12:31:06
nessus
nessus
Fedora 10 : Miro-2.0.5-5.fc10 / blam-1.8.5-15.fc10 / epiphany-2.24.3-11.fc10 / etc (2009-10981)
2009-11-05 00:00:00
Debian DSA-1922-1 : xulrunner - several vulnerabilities
2010-02-24 00:00:00
Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)
2009-12-04 00:00:00
oraclelinux
oraclelinux
firefox security update
2009-10-28 00:00:00
redhat
redhat
(RHSA-2009:1530) Critical: firefox security update
2009-10-27 00:00:00
centos
centos
firefox, nspr security update
2009-10-28 13:44:04
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner regression
2009-11-11 00:00:00
Firefox and Xulrunner vulnerabilities
2009-10-31 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-10-27 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-11-04 14:24:35
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.89 High

EPSS

Percentile

98.7%

JSON
Related for CVE-2009-3382
openvas34checkpoint_advisories2prion1nvd1ubuntucve1veracode1cvelist1securityvulns2mozilla1seebug1debian1osv1fedora19nessus23oraclelinux1redhat1centos1vmware2ubuntu2freebsd1suse1gentoo1