Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD49E8F2EE-8147-11DE-A994-0030843D3802
HistoryAug 03, 2009 - 12:00 a.m.

mozilla -- multiple vulnerabilities

2009-08-0300:00:00
vuxml.freebsd.org
14

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.604 Medium

EPSS

Percentile

97.7%

JSON

Mozilla Project reports:

MFSA 2009-38: Data corruption with SOCKS5 reply containing DNS name
longer than 15 characters
MFSA 2009-42: Compromise of SSL-protected communication
MFSA 2009-43: Heap overflow in certificate regexp parsing
MFSA 2009-44: Location bar and SSL indicator spoofing via window.open()
on invalid URL
MFSA 2009-45: Crashes with evidence of memory corruption
(rv:1.9.1.2/1.9.0.13)
MFSA 2009-46: Chrome privilege escalation due to incorrectly cached
wrapper

Related

openvas 69
nessus 55
securityvulns 7
redhat 5
ubuntu 3
oraclelinux 2
debian 3
osv 2
prion 15
debiancve 4
ubuntucve 9
checkpoint_advisories 2
centos 1
mozilla 3
veracode 3
seebug 3
cve 9
threatpost 1
exploitdb 1
talos 1
f5 1
openvas
openvas
FreeBSD Ports: firefox, linux-firefox-devel
2009-08-17 00:00:00
FreeBSD Ports: firefox, linux-firefox-devel
2009-08-17 00:00:00
SLES10: Security update for Mozilla NSS
2009-10-27 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (49e8f2ee-8147-11de-a994-0030843d3802)
2009-08-05 00:00:00
openSUSE 10 Security Update : libfreebl3 (libfreebl3-6494)
2009-10-06 00:00:00
openSUSE Security Update : libfreebl3 (libfreebl3-1201)
2009-08-20 00:00:00
securityvulns
securityvulns
Mozilla Firefox, Thunderbird, SeaMonkey, NSS multiple security vulnerabilities
2009-08-07 00:00:00
Mozilla Foundation Security Advisory 2009-43
2009-08-07 00:00:00
Mozilla Foundation Security Advisory 2009-38
2009-08-07 00:00:00
redhat
redhat
(RHSA-2009:1207) Critical: nspr and nss security update
2009-08-12 00:00:00
(RHSA-2009:1184) Critical: nspr and nss security and bug fix update
2009-07-30 00:00:00
(RHSA-2009:1190) Critical: nspr and nss security and bug fix update
2009-07-31 00:00:00
ubuntu
ubuntu
NSS vulnerabilities
2009-08-04 00:00:00
NSPR update
2009-08-04 00:00:00
NSS regression
2009-09-02 00:00:00
oraclelinux
oraclelinux
nspr and nss security, bug fix, and enhancement update
2009-07-21 00:00:00
nspr and nss security and bug fix update
2009-07-30 00:00:00
debian
debian
[SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities
2009-08-26 19:01:32
[SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities
2010-03-31 08:41:27
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:30:08
osv
osv
nss - several vulnerabilities
2009-08-26 00:00:00
icedove - several vulnerabilities
2010-03-31 00:00:00
prion
prion
Heap overflow
2009-08-03 14:30:00
Design/Logic Flaw
2009-08-04 16:30:00
Code injection
2009-07-30 19:30:00
debiancve
debiancve
CVE-2009-2404
2009-08-03 14:30:00
CVE-2009-2408
2009-07-30 19:30:00
CVE-2009-3767
2009-10-23 19:30:00
ubuntucve
ubuntucve
CVE-2009-2404
2009-08-03 00:00:00
CVE-2009-2470
2009-08-04 00:00:00
CVE-2009-2408
2009-07-30 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Network Security Services Regexp Heap Overflow (CVE-2009-2404)
2009-08-20 00:00:00
Mozilla Network Security Services Regexp Heap Overflow - Improved Performance (CVE-2009-2404)
2013-05-08 00:00:00
centos
centos
seamonkey security update
2009-07-31 00:33:31
mozilla
mozilla
Heap overflow in certificate regexp parsing — Mozilla
2009-08-01 00:00:00
Data corruption with SOCKS5 reply containing DNS name longer than 15 characters — Mozilla
2009-07-21 00:00:00
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:33:39
Denial Of Service (DoS)
2020-04-10 00:36:34
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
seebug
seebug
Mozilla SeaMonkey规则表达式解析堆缓冲区溢出漏洞
2009-07-31 00:00:00
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability(CVE-2017-2801)
2017-09-19 00:00:00
cve
cve
CVE-2009-2404
2009-08-03 14:30:00
CVE-2009-2470
2009-08-04 16:30:00
CVE-2009-2454
2009-07-14 14:30:00
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
exploitdb
exploitdb
Mozilla NSS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-06-30 00:00:00
talos
talos
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability
2017-04-28 00:00:00
f5
f5
SOL15683 - Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.604 Medium

EPSS

Percentile

97.7%

JSON
Related for 49E8F2EE-8147-11DE-A994-0030843D3802
openvas69nessus55securityvulns7redhat5ubuntu3oraclelinux2debian3osv2prion15debiancve4ubuntucve9checkpoint_advisories2centos1mozilla3veracode3seebug3cve9threatpost1exploitdb1talos1f51