CVE-2009-3371

2009-10-2900:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.501 Medium

EPSS

Percentile

97.5%

JSON

Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows
remote attackers to cause a denial of service (application crash) or
possibly execute arbitrary code by creating JavaScript web-workers
recursively.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchfirefox-3.5< 3.5.4+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchfirefox-3.5< 3.5.4+nobinonly-0ubuntu0.9.10.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9.1< 1.9.1.4+nobinonly-0ubuntu0.9.04.3UNKNOWN
ubuntu9.10noarchxulrunner-1.9.1< 1.9.1.4+nobinonly-0ubuntu0.9.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.04	noarch	firefox-3.5	< 3.5.4+nobinonly-0ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	firefox-3.5	< 3.5.4+nobinonly-0ubuntu0.9.10.1	UNKNOWN
ubuntu	9.04	noarch	xulrunner-1.9.1	< 1.9.1.4+nobinonly-0ubuntu0.9.04.3	UNKNOWN
ubuntu	9.10	noarch	xulrunner-1.9.1	< 1.9.1.4+nobinonly-0ubuntu0.9.10.1	UNKNOWN