Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3376
HistoryOct 29, 2009 - 2:30 p.m.

CVE-2009-3376

2009-10-2914:30:00
CWE-16
[email protected]
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.5

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.

Affected configurations

Nvd
Node
mozillafirefoxMatch3.0beta5
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.5.1
OR
mozillafirefoxMatch3.5.2
OR
mozillafirefoxMatch3.5.3
OR
mozillaseamonkeyRange≀1.5.0.10
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1alpha
OR
mozillaseamonkeyMatch1.1beta
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillaseamonkeyMatch1.1.13
OR
mozillaseamonkeyMatch1.1.14
OR
mozillaseamonkeyMatch1.1.15
OR
mozillaseamonkeyMatch1.1.16
OR
mozillaseamonkeyMatch1.1.17
OR
mozillaseamonkeyMatch1.5.0.8
OR
mozillaseamonkeyMatch1.5.0.9

Related

prion 1
veracode 1
securityvulns 2
seebug 2
mozilla 1
cvelist 1
ubuntucve 1
cve 1
openvas 61
nessus 46
oraclelinux 3
ubuntu 3
redhat 4
centos 4
fedora 42
debian 1
osv 1
freebsd 2
vmware 2
suse 1
gentoo 1
prion
prion
Code injection
2009-10-29 14:30:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:36:53
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-62
2009-10-28 00:00:00
Mozilla Firefox / Seamonkey multiple security vulnerabilities
2009-11-05 00:00:00
seebug
seebug
Mozilla Firefox and SeaMonkey Download Filename Spoofing Vulnerability
2010-03-19 00:00:00
Mozilla Firefox下载文仢名欺ιͺ—ζΌζ΄ž
2009-11-03 00:00:00
mozilla
mozilla
Download filename spoofing with RTL override β€” Mozilla
2009-10-27 00:00:00
cvelist
cvelist
CVE-2009-3376
2009-10-29 14:00:00
ubuntucve
ubuntucve
CVE-2009-3376
2009-10-29 00:00:00
cve
cve
CVE-2009-3376
2009-10-29 14:30:00
openvas
openvas
Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Windows)
2009-11-04 00:00:00
Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Linux)
2009-11-04 00:00:00
Mozilla Seamonkey Multiple Vulnerabilities (Nov 2009) - Windows
2009-11-04 00:00:00
nessus
nessus
SeaMonkey < 2.0 Multiple Vulnerabilities
2009-10-29 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
Mozilla Thunderbird < 2.0.0.24 Multiple Vulnerabilities
2010-03-19 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-10-28 00:00:00
firefox security update
2009-10-28 00:00:00
thunderbird security update
2010-03-17 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-03-18 00:00:00
Firefox and Xulrunner regression
2009-11-11 00:00:00
Firefox and Xulrunner vulnerabilities
2009-10-31 00:00:00
redhat
redhat
(RHSA-2009:1531) Critical: seamonkey security update
2009-10-27 00:00:00
(RHSA-2009:1530) Critical: firefox security update
2009-10-27 00:00:00
(RHSA-2010:0154) Moderate: thunderbird security update
2010-03-17 00:00:00
centos
centos
seamonkey security update
2009-10-28 13:15:48
firefox, nspr security update
2009-10-28 13:44:04
thunderbird security update
2010-03-17 18:24:23
fedora
fedora
[SECURITY] Fedora 11 Update: ruby-gnome2-0.19.3-3.fc11
2009-10-29 02:59:35
[SECURITY] Fedora 11 Update: seamonkey-1.1.19-1.fc11
2010-04-21 21:53:31
[SECURITY] Fedora 11 Update: monodevelop-2.0-6.fc11
2009-10-29 02:59:35
debian
debian
[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities
2009-10-28 21:13:30
osv
osv
xulrunner - several vulnerabilities
2009-10-28 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-03-16 00:00:00
mozilla -- multiple vulnerabilities
2009-10-27 00:00:00
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-11-04 14:24:35
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.5

Confidence

High

EPSS

0.014

Percentile

86.6%

JSON
Related for NVD:CVE-2009-3376
prion1veracode1securityvulns2seebug2mozilla1cvelist1ubuntucve1cve1openvas61nessus46oraclelinux3ubuntu3redhat4centos4fedora42debian1osv1freebsd2vmware2suse1gentoo1