Lucene search
Mozilla FoundationMFSA2009-38HistoryJul 21, 2009 - 12:00 a.m.
Data corruption with SOCKS5 reply containing DNS name longer than 15 characters — Mozilla
2009-07-2100:00:00
Mozilla Foundation
www.mozilla.org
9
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.02 Low
EPSS
Percentile
88.7%
Andrej Andolsek reported that when Firefox receives a reply from a SOCKS5 proxy which contains a DNS name longer than 15 characters, the subsequent data stream in the response can become corrupted. There was no evidence of memory corruption, however, and the severity of the issue was determined to be low.
Related
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:36:34
prion
prion
Design/Logic Flaw
2009-08-04 16:30:00
openvas
openvas
Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability (Aug 2009) - Linux
2009-08-07 00:00:00
Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 (Linux)
2009-08-07 00:00:00
Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 (Windows)
2009-08-07 00:00:00
ubuntucve
ubuntucve
CVE-2009-2470
2009-08-04 00:00:00
cve
cve
CVE-2009-2470
2009-08-04 16:30:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-38
2009-08-07 00:00:00
nessus
nessus
Mozilla Firefox < 3.5.2/3.0.12 Multiple Vulnerabilities
2009-08-04 00:00:00
Mozilla Firefox < 3.5.2/3.0.12 Multiple Vulnerabilities
2009-08-04 00:00:00
CentOS 3 : seamonkey (CESA-2009:1163)
2009-07-23 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-07-22 00:00:00
firefox security update
2009-07-22 00:00:00
thunderbird security update
2010-03-17 00:00:00
redhat
redhat
(RHSA-2009:1163) Critical: seamonkey security update
2009-07-21 00:00:00
(RHSA-2009:1162) Critical: firefox security update
2009-07-21 00:00:00
(RHSA-2010:0153) Moderate: thunderbird security update
2010-03-17 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-08-03 00:00:00
centos
centos
seamonkey security update
2009-07-22 22:37:56
firefox, xulrunner security update
2009-07-28 12:22:37
thunderbird security update
2010-03-17 18:24:23
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.02 Low
EPSS
Percentile
88.7%
Related for MFSA2009-38