Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2009-2404
HistoryAug 03, 2009 - 2:30 p.m.

Heap overflow

2009-08-0314:30:00
PRIOn knowledge base
www.prio-n.com
5

8.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.604 Medium

EPSS

Percentile

97.7%

JSON

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject’s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.

CPENameOperatorVersion
network_security_serviceseq3.12.3

References

Related

nessus 34
openvas 48
securityvulns 3
ubuntucve 1
debiancve 1
checkpoint_advisories 2
veracode 1
mozilla 1
centos 1
seebug 1
redhat 5
cve 1
osv 2
ubuntu 3
oraclelinux 2
debian 2
freebsd 1
vmware 2
suse 1
rosalinux 1
oracle 1
gentoo 1
nessus
nessus
Oracle Linux 3 : seamonkey (ELSA-2009-1185)
2013-07-12 00:00:00
CentOS 3 : seamonkey (CESA-2009:1185)
2009-07-31 00:00:00
RHEL 3 : seamonkey (RHSA-2009:1185)
2009-07-31 00:00:00
openvas
openvas
CentOS Security Advisory CESA-2009:1185 (seamonkey)
2009-08-17 00:00:00
Multiple Products NSS Library Buffer Overflow Vulnerability
2009-08-11 00:00:00
RedHat Security Advisory RHSA-2009:1185
2009-08-17 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-43
2009-08-07 00:00:00
Mozilla Firefox, Thunderbird, SeaMonkey, NSS multiple security vulnerabilities
2009-08-07 00:00:00
Oracle / Sun applications multiple security ulnerabilities
2010-04-17 00:00:00
ubuntucve
ubuntucve
CVE-2009-2404
2009-08-03 00:00:00
debiancve
debiancve
CVE-2009-2404
2009-08-03 14:30:00
checkpoint_advisories
checkpoint_advisories
Mozilla Network Security Services Regexp Heap Overflow (CVE-2009-2404)
2009-08-20 00:00:00
Mozilla Network Security Services Regexp Heap Overflow - Improved Performance (CVE-2009-2404)
2013-05-08 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:33:39
mozilla
mozilla
Heap overflow in certificate regexp parsing β€” Mozilla
2009-08-01 00:00:00
centos
centos
seamonkey security update
2009-07-31 00:33:31
seebug
seebug
Mozilla SeaMonkeyθ§„εˆ™θ‘¨θΎΎεΌθ§£ζžε †ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2009-07-31 00:00:00
redhat
redhat
(RHSA-2009:1185) Critical: seamonkey security update
2009-07-30 00:00:00
(RHSA-2009:1207) Critical: nspr and nss security update
2009-08-12 00:00:00
(RHSA-2009:1184) Critical: nspr and nss security and bug fix update
2009-07-30 00:00:00
cve
cve
CVE-2009-2404
2009-08-03 14:30:00
osv
osv
nss - several vulnerabilities
2009-08-26 00:00:00
icedove - several vulnerabilities
2010-03-31 00:00:00
ubuntu
ubuntu
NSS regression
2009-09-02 00:00:00
NSPR update
2009-08-04 00:00:00
NSS vulnerabilities
2009-08-04 00:00:00
oraclelinux
oraclelinux
nspr and nss security, bug fix, and enhancement update
2009-07-21 00:00:00
nspr and nss security and bug fix update
2009-07-30 00:00:00
debian
debian
[SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities
2009-08-26 19:01:32
[SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities
2010-03-31 08:41:27
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-08-03 00:00:00
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-10-20 17:59:46
rosalinux
rosalinux
Advisory ROSA-SA-2024-2370
2024-03-12 08:35:15
oracle
oracle
Security | Oracle Critical Patch Update - April 2010
2010-04-13 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

8.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.604 Medium

EPSS

Percentile

97.7%

JSON
Related for PRION:CVE-2009-2404
nessus34openvas48securityvulns3ubuntucve1debiancve1checkpoint_advisories2veracode1mozilla1centos1seebug1redhat5cve1osv2ubuntu3oraclelinux2debian2freebsd1vmware2suse1rosalinux1oracle1gentoo1