Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3382
HistoryOct 29, 2009 - 12:00 a.m.

CVE-2009-3382

2009-10-2900:00:00
ubuntu.com
ubuntu.com
11

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.89 High

EPSS

Percentile

98.7%

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla
Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames,
which allows remote attackers to cause a denial of service (memory
corruption and application crash) or possibly execute arbitrary code via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchfirefox-3.0<Β 3.0.15+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchfirefox-3.0<Β 3.0.15+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchfirefox-3.0<Β 3.0.15+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9<Β 1.9.0.15+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9<Β 1.9.0.15+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9<Β 1.9.0.15+nobinonly-0ubuntu0.9.04.1UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.89 High

EPSS

Percentile

98.7%