9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.091 Low
EPSS
Percentile
94.5%
Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3980
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3981
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3982
bugzilla.mozilla.org/buglist.cgi?bug_id=495875,470487
bugzilla.mozilla.org/buglist.cgi?bug_id=510518,513981,514999,524121
bugzilla.mozilla.org/buglist.cgi?bug_id=515811,522374,457514,506267,479931,293347,494617,516237
bugzilla.mozilla.org/show_bug.cgi?id=468771