Lucene search

[email protected]NVD:CVE-2009-0774

HistoryMar 05, 2009 - 2:30 a.m.

CVE-2009-0774

2009-03-0502:30:00

CWE-399

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.941 High

EPSS

Percentile

99.2%

JSON

The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.

Affected configurations

NVD

Node

mozillafirefoxRange≤3.0.6

mozillafirefoxMatch1.0

mozillafirefoxMatch1.0.1

mozillafirefoxMatch1.0.2

mozillafirefoxMatch1.0.3

mozillafirefoxMatch1.0.4

mozillafirefoxMatch1.0.5

mozillafirefoxMatch1.0.6

mozillafirefoxMatch1.0.7

mozillafirefoxMatch1.0.8

mozillafirefoxMatch1.5

mozillafirefoxMatch1.5.0.1

mozillafirefoxMatch1.5.0.2

mozillafirefoxMatch1.5.0.3

mozillafirefoxMatch1.5.0.4

mozillafirefoxMatch1.5.0.5

mozillafirefoxMatch1.5.0.6

mozillafirefoxMatch1.5.0.7

mozillafirefoxMatch1.5.0.8

mozillafirefoxMatch1.5.0.9

mozillafirefoxMatch1.5.0.10

mozillafirefoxMatch1.5.0.11

mozillafirefoxMatch1.5.0.12

mozillafirefoxMatch2.0

mozillafirefoxMatch2.0.0.1

mozillafirefoxMatch2.0.0.2

mozillafirefoxMatch2.0.0.3

mozillafirefoxMatch2.0.0.4

mozillafirefoxMatch2.0.0.5

mozillafirefoxMatch2.0.0.6

mozillafirefoxMatch2.0.0.7

mozillafirefoxMatch2.0.0.8

mozillafirefoxMatch2.0.0.9

mozillafirefoxMatch2.0.0.10

mozillafirefoxMatch2.0.0.11

mozillafirefoxMatch2.0.0.12

mozillafirefoxMatch2.0.0.13

mozillafirefoxMatch2.0.0.14

mozillafirefoxMatch2.0.0.15

mozillafirefoxMatch2.0.0.16

mozillafirefoxMatch2.0.0.17

mozillafirefoxMatch2.0.0.18

mozillafirefoxMatch2.0.0.19

mozillafirefoxMatch2.0.0.20

mozillafirefoxMatch3.0

mozillafirefoxMatch3.0.1

mozillafirefoxMatch3.0.2

mozillafirefoxMatch3.0.3

mozillafirefoxMatch3.0.4

mozillafirefoxMatch3.0.5

mozillaseamonkeyRange≤1.1.14

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1alpha

mozillaseamonkeyMatch1.1beta

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillathunderbirdRange≤2.0.0.20

mozillathunderbirdMatch2.0.0.0

mozillathunderbirdMatch2.0.0.4

mozillathunderbirdMatch2.0.0.5

mozillathunderbirdMatch2.0.0.6

mozillathunderbirdMatch2.0.0.9

mozillathunderbirdMatch2.0.0.12

mozillathunderbirdMatch2.0.0.14

mozillathunderbirdMatch2.0.0.16

mozillathunderbirdMatch2.0.0.17

mozillathunderbirdMatch2.0.0.18

mozillathunderbirdMatch2.0.0.19

References

lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html

secunia.com/advisories/34137

secunia.com/advisories/34140

secunia.com/advisories/34145

secunia.com/advisories/34272

secunia.com/advisories/34324

secunia.com/advisories/34383

secunia.com/advisories/34387

secunia.com/advisories/34417

secunia.com/advisories/34462

secunia.com/advisories/34464

secunia.com/advisories/34527

slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420

slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952

support.avaya.com/elmodocs2/security/ASA-2009-069.htm

support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

www.debian.org/security/2009/dsa-1751

www.debian.org/security/2009/dsa-1830

www.mandriva.com/security/advisories?name=MDVSA-2009:075

www.mandriva.com/security/advisories?name=MDVSA-2009:083

www.mozilla.org/security/announce/2009/mfsa2009-07.html

www.redhat.com/support/errata/RHSA-2009-0258.html

www.redhat.com/support/errata/RHSA-2009-0315.html

www.redhat.com/support/errata/RHSA-2009-0325.html

www.securityfocus.com/bid/33990

www.securitytracker.com/id?1021795

www.vupen.com/english/advisories/2009/0632

bugzilla.mozilla.org/show_bug.cgi?id=473709

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945

usn.ubuntu.com/741-1/

www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html

www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html

www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.941 High

EPSS

Percentile

99.2%

JSON

Related for NVD:CVE-2009-0774

prion2 ubuntucve2 cve2 cvelist2 securityvulns2 mozilla1 veracode2 checkpoint_advisories1 nvd1 openvas82 osv2 nessus39 debian2 fedora43 redhat3 suse2 centos4 oraclelinux3 ubuntu4