Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1571
HistoryFeb 22, 2010 - 1:00 p.m.

CVE-2009-1571

2010-02-2213:00:01
CWE-94
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.151 Low

EPSS

Percentile

95.9%

JSON

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

Affected configurations

NVD
Node
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0alpha
OR
mozillafirefoxMatch3.0beta2
OR
mozillafirefoxMatch3.0beta5
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.0.14
OR
mozillafirefoxMatch3.0.15
OR
mozillafirefoxMatch3.0.17
OR
mozillafirefoxMatch3.5
OR
mozillafirefoxMatch3.5.1
OR
mozillafirefoxMatch3.5.2
OR
mozillafirefoxMatch3.5.3
OR
mozillafirefoxMatch3.5.4
OR
mozillafirefoxMatch3.5.5
OR
mozillafirefoxMatch3.5.6
OR
mozillafirefoxMatch3.5.7
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillaseamonkeyMatch1.1.13
OR
mozillaseamonkeyMatch1.1.14
OR
mozillaseamonkeyMatch1.1.15
OR
mozillaseamonkeyMatch1.1.16
OR
mozillaseamonkeyMatch1.1.17
OR
mozillaseamonkeyMatch2.0
OR
mozillaseamonkeyMatch2.0alpha_2
OR
mozillaseamonkeyMatch2.0alpha_3
OR
mozillaseamonkeyMatch2.0beta_1
OR
mozillaseamonkeyMatch2.0beta_2
OR
mozillaseamonkeyMatch2.0rc1
OR
mozillaseamonkeyMatch2.0rc2
OR
mozillaseamonkeyMatch2.0.1
OR
mozillaseamonkeyMatch2.0.2

References

Related

prion 4
cvelist 4
veracode 1
cve 4
ubuntucve 1
nessus 27
mozilla 1
openvas 102
seebug 1
securityvulns 3
nvd 3
fedora 34
redhat 2
centos 2
oraclelinux 2
ubuntu 2
osv 1
freebsd 1
suse 1
debian 3
prion
prion
Design/Logic Flaw
2010-02-22 13:00:00
Out-of-bounds
2010-05-20 17:30:00
Design/Logic Flaw
2010-05-20 17:30:00
cvelist
cvelist
CVE-2009-1571
2010-02-21 17:00:00
CVE-2010-1987
2010-05-20 17:00:00
CVE-2010-1988
2010-05-20 17:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:42:20
cve
cve
CVE-2009-1571
2010-02-22 13:00:01
CVE-2010-1986
2010-05-20 17:30:01
CVE-2010-1987
2010-05-20 17:30:01
ubuntucve
ubuntucve
CVE-2009-1571
2010-02-17 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:051)
2010-03-02 00:00:00
Fedora 11 : sunbird-1.0-0.14.20090715hg.fc11 / thunderbird-3.0.2-1.fc11 (2010-3267)
2010-07-01 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
mozilla
mozilla
Use-after-free crash in HTML parser — Mozilla
2010-02-17 00:00:00
openvas
openvas
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
2010-02-15 00:00:00
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
2010-02-15 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:051 (mozilla-thunderbird)
2010-03-12 00:00:00
seebug
seebug
Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities
2010-05-25 00:00:00
securityvulns
securityvulns
Secunia Research: Mozilla Firefox Memory Corruption Vulnerability
2010-02-19 00:00:00
Mozilla Foundation Security Advisory 2010-03
2010-02-19 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-02-25 00:00:00
nvd
nvd
CVE-2010-1988
2010-05-20 17:30:01
CVE-2010-1987
2010-05-20 17:30:01
CVE-2010-1986
2010-05-20 17:30:01
fedora
fedora
[SECURITY] Fedora 12 Update: sunbird-1.0-0.19.20090916hg.fc12
2010-03-02 00:56:32
[SECURITY] Fedora 11 Update: sunbird-1.0-0.14.20090715hg.fc11
2010-03-02 01:02:35
[SECURITY] Fedora 11 Update: thunderbird-3.0.2-1.fc11
2010-03-02 01:02:35
redhat
redhat
(RHSA-2010:0113) Critical: seamonkey security update
2010-02-17 00:00:00
(RHSA-2010:0112) Critical: firefox security update
2010-02-17 00:00:00
centos
centos
seamonkey security update
2010-02-18 00:29:51
firefox, xulrunner security update
2010-02-18 00:33:18
oraclelinux
oraclelinux
seamonkey security update
2010-02-17 00:00:00
firefox security update
2010-02-17 00:00:00
ubuntu
ubuntu
Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
2010-02-17 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2010-02-17 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-02-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-02-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey
2010-03-04 16:53:48
debian
debian
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
2010-02-18 20:04:53
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:02:49
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:11:52

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.151 Low

EPSS

Percentile

95.9%

JSON
Related for NVD:CVE-2009-1571
prion4cvelist4veracode1cve4ubuntucve1nessus27mozilla1openvas102seebug1securityvulns3nvd3fedora34redhat2centos2oraclelinux2ubuntu2osv1freebsd1suse1debian3