Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3373
HistoryOct 29, 2009 - 2:30 p.m.

CVE-2009-3373

2009-10-2914:30:00
CWE-119
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.322 Low

EPSS

Percentile

97.1%

JSON

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD
Node
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0alpha
OR
mozillafirefoxMatch3.0beta2
OR
mozillafirefoxMatch3.0beta5
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.0.14
OR
mozillafirefoxMatch3.5.1
OR
mozillafirefoxMatch3.5.2
OR
mozillafirefoxMatch3.5.3
OR
mozillaseamonkeyRange≀1.5.0.10
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1alpha
OR
mozillaseamonkeyMatch1.1beta
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillaseamonkeyMatch1.1.13
OR
mozillaseamonkeyMatch1.1.14
OR
mozillaseamonkeyMatch1.1.15
OR
mozillaseamonkeyMatch1.1.16
OR
mozillaseamonkeyMatch1.1.17
OR
mozillaseamonkeyMatch1.5.0.8
OR
mozillaseamonkeyMatch1.5.0.9

Related

cve 2
cvelist 2
zdt 1
securityvulns 3
prion 2
mozilla 1
seebug 1
ubuntucve 2
veracode 1
nvd 1
openvas 41
nessus 29
fedora 41
debian 1
osv 1
oraclelinux 1
centos 1
redhat 1
vmware 2
ubuntu 2
suse 1
freebsd 1
gentoo 1
cve
cve
CVE-2009-3373
2009-10-29 14:30:00
CVE-2009-3978
2022-10-03 16:23:54
cvelist
cvelist
CVE-2009-3373
2009-10-29 14:00:00
CVE-2009-3978
2022-10-03 16:23:54
zdt
zdt
Mozilla Firefox 3.5.4 - Local Color Map Exploit
2013-08-19 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-56
2009-10-28 00:00:00
iDefense Security Advisory 10.28.09: Mozilla Firefox GIF Color Map Parsing Buffer Overflow Vulnerability
2009-10-29 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2009-11-05 00:00:00
prion
prion
Heap overflow
2009-10-29 14:30:00
Null pointer dereference
2009-11-19 00:30:00
mozilla
mozilla
Heap buffer overflow in GIF color map parser β€” Mozilla
2009-10-27 00:00:00
seebug
seebug
Mozilla Firefox libpr0n GIFθ§£ζžε™¨ε †ζΊ’ε‡ΊζΌζ΄ž
2009-10-31 00:00:00
ubuntucve
ubuntucve
CVE-2009-3373
2009-10-29 00:00:00
CVE-2009-3978
2009-11-19 00:00:00
veracode
veracode
Buffer Overflows
2020-04-10 00:38:53
nvd
nvd
CVE-2009-3978
2009-11-19 00:30:00
openvas
openvas
Mozilla Seamonkey Multiple Vulnerabilities (Nov 2009) - Linux
2009-11-04 00:00:00
Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Linux)
2009-11-04 00:00:00
Mozilla Seamonkey Multiple Vulnerabilities (Nov 2009) - Windows
2009-11-04 00:00:00
nessus
nessus
SeaMonkey < 2.0 Multiple Vulnerabilities
2009-10-29 00:00:00
Debian DSA-1922-1 : xulrunner - several vulnerabilities
2010-02-24 00:00:00
Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)
2009-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: chmsee-1.0.1-12.fc11
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: galeon-2.0.7-17.fc11
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: blam-1.8.5-15.fc11
2009-10-29 02:59:35
debian
debian
[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities
2009-10-28 21:13:30
osv
osv
xulrunner - several vulnerabilities
2009-10-28 00:00:00
oraclelinux
oraclelinux
firefox security update
2009-10-28 00:00:00
centos
centos
firefox, nspr security update
2009-10-28 13:44:04
redhat
redhat
(RHSA-2009:1530) Critical: firefox security update
2009-10-27 00:00:00
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-10-31 00:00:00
Firefox and Xulrunner regression
2009-11-11 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-11-04 14:24:35
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-10-27 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.322 Low

EPSS

Percentile

97.1%

JSON
Related for NVD:CVE-2009-3373
cve2cvelist2zdt1securityvulns3prion2mozilla1seebug1ubuntucve2veracode1nvd1openvas41nessus29fedora41debian1osv1oraclelinux1centos1redhat1vmware2ubuntu2suse1freebsd1gentoo1