Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2009-1169
HistoryMar 27, 2009 - 12:30 a.m.

CVE-2009-1169

2009-03-2700:30:00
CWE-399
redhat
web.nvd.nist.gov
59
cve-2009-1169
mozilla
firefox
seamonkey
remote attack
denial of service
arbitrary code execution
xml
xslt

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.6

Confidence

High

EPSS

0.96

Percentile

99.5%

JSON

The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.

Affected configurations

Nvd
Node
mozillafirefoxRange≤3.0.7
OR
mozillafirefoxMatch0.1
OR
mozillafirefoxMatch0.2
OR
mozillafirefoxMatch0.3
OR
mozillafirefoxMatch0.4
OR
mozillafirefoxMatch0.5
OR
mozillafirefoxMatch0.6
OR
mozillafirefoxMatch0.6.1
OR
mozillafirefoxMatch0.7
OR
mozillafirefoxMatch0.7.1
OR
mozillafirefoxMatch0.8
OR
mozillafirefoxMatch0.9
OR
mozillafirefoxMatch0.9rc
OR
mozillafirefoxMatch0.9.1
OR
mozillafirefoxMatch0.9.2
OR
mozillafirefoxMatch0.9.3
OR
mozillafirefoxMatch0.9_rc
OR
mozillafirefoxMatch0.10
OR
mozillafirefoxMatch0.10.1
OR
mozillafirefoxMatch1.0
OR
mozillafirefoxMatch1.0preview_release
OR
mozillafirefoxMatch1.0.1
OR
mozillafirefoxMatch1.0.2
OR
mozillafirefoxMatch1.0.3
OR
mozillafirefoxMatch1.0.4
OR
mozillafirefoxMatch1.0.5
OR
mozillafirefoxMatch1.0.6
OR
mozillafirefoxMatch1.0.6linux
OR
mozillafirefoxMatch1.0.7
OR
mozillafirefoxMatch1.0.8
OR
mozillafirefoxMatch1.5
OR
mozillafirefoxMatch1.5beta1
OR
mozillafirefoxMatch1.5beta2
OR
mozillafirefoxMatch1.5.0.1
OR
mozillafirefoxMatch1.5.0.2
OR
mozillafirefoxMatch1.5.0.3
OR
mozillafirefoxMatch1.5.0.4
OR
mozillafirefoxMatch1.5.0.5
OR
mozillafirefoxMatch1.5.0.6
OR
mozillafirefoxMatch1.5.0.7
OR
mozillafirefoxMatch1.5.0.8
OR
mozillafirefoxMatch1.5.0.9
OR
mozillafirefoxMatch1.5.0.10
OR
mozillafirefoxMatch1.5.0.11
OR
mozillafirefoxMatch1.5.0.12
OR
mozillafirefoxMatch1.5.1
OR
mozillafirefoxMatch1.5.2
OR
mozillafirefoxMatch1.5.3
OR
mozillafirefoxMatch1.5.4
OR
mozillafirefoxMatch1.5.5
OR
mozillafirefoxMatch1.5.6
OR
mozillafirefoxMatch1.5.7
OR
mozillafirefoxMatch1.5.8
OR
mozillafirefoxMatch1.8
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0beta_1
OR
mozillafirefoxMatch2.0beta1
OR
mozillafirefoxMatch2.0rc2
OR
mozillafirefoxMatch2.0rc3
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.2
OR
mozillafirefoxMatch2.0.0.3
OR
mozillafirefoxMatch2.0.0.4
OR
mozillafirefoxMatch2.0.0.5
OR
mozillafirefoxMatch2.0.0.6
OR
mozillafirefoxMatch2.0.0.7
OR
mozillafirefoxMatch2.0.0.8
OR
mozillafirefoxMatch2.0.0.9
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillafirefoxMatch2.0.0.14
OR
mozillafirefoxMatch2.0.0.15
OR
mozillafirefoxMatch2.0.0.16
OR
mozillafirefoxMatch2.0.0.17
OR
mozillafirefoxMatch2.0.0.18
OR
mozillafirefoxMatch2.0.0.19
OR
mozillafirefoxMatch2.0.0.20
OR
mozillafirefoxMatch2.0.0.21
OR
mozillafirefoxMatch2.0_.1
OR
mozillafirefoxMatch2.0_.4
OR
mozillafirefoxMatch2.0_.5
OR
mozillafirefoxMatch2.0_.6
OR
mozillafirefoxMatch2.0_.7
OR
mozillafirefoxMatch2.0_.9
OR
mozillafirefoxMatch2.0_.10
OR
mozillafirefoxMatch2.0_8
OR
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0alpha
OR
mozillafirefoxMatch3.0beta2
OR
mozillafirefoxMatch3.0beta5
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0beta5
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillafirefox0.1cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*
mozillafirefox0.2cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*
mozillafirefox0.3cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*
mozillafirefox0.4cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*
mozillafirefox0.5cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*
mozillafirefox0.6cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*
mozillafirefox0.6.1cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*
mozillafirefox0.7cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*
mozillafirefox0.7.1cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 991

References

Related

openvas 50
prion 1
nvd 1
ubuntucve 1
checkpoint_advisories 2
mozilla 1
veracode 1
securityvulns 2
seebug 1
cvelist 1
exploitdb 1
fedora 58
nessus 24
debian 2
ubuntu 1
centos 3
redhat 2
oraclelinux 2
suse 2
osv 1
gentoo 1
openvas
openvas
Firefox XSL Parsing Vulnerability - Linux
2009-04-08 00:00:00
Mozilla Seamonkey XSL Parsing Vulnerability (Linux)
2009-04-08 00:00:00
Mozilla Seamonkey XSL Parsing Vulnerability - Windows
2009-04-08 00:00:00
prion
prion
Code injection
2009-03-27 00:30:00
nvd
nvd
CVE-2009-1169
2009-03-27 00:30:00
ubuntucve
ubuntucve
CVE-2009-1169
2009-03-27 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox XSL Transformation Memory Corruption - Ver2 (CVE-2009-1169)
2015-03-26 00:00:00
Mozilla Firefox XSL Transformation Memory Corruption (CVE-2009-1169)
2010-03-31 00:00:00
mozilla
mozilla
XSL Transformation vulnerability — Mozilla
2009-03-27 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:31:20
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-12
2009-04-01 00:00:00
Mozilla Firefox / Seamonkey / Thunderbird multiple security vulnerabilities
2009-04-01 00:00:00
seebug
seebug
Firefox XSL解析root XML标签内存破坏漏洞
2009-04-01 00:00:00
cvelist
cvelist
CVE-2009-1169
2009-03-27 00:00:00
exploitdb
exploitdb
Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (1)
2009-03-25 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: epiphany-2.22.2-9.fc9
2009-03-28 01:24:44
[SECURITY] Fedora 9 Update: totem-2.23.2-13.fc9
2009-03-28 17:24:32
[SECURITY] Fedora 10 Update: epiphany-2.24.3-4.fc10
2009-03-28 17:23:55
nessus
nessus
CentOS 3 : seamonkey (CESA-2009:0398)
2009-03-30 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : firefox, firefox-3.0, xulrunner-1.9 vulnerabilities (USN-745-1)
2009-04-23 00:00:00
Firefox < 3.0.8 Multiple Vulnerabilities
2009-03-30 00:00:00
debian
debian
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-03-28 00:00:00
centos
centos
seamonkey security update
2009-03-28 14:45:12
firefox, xulrunner security update
2009-04-09 17:48:16
seamonkey security update
2009-03-30 22:53:22
redhat
redhat
(RHSA-2009:0398) Critical: seamonkey security update
2009-03-27 00:00:00
(RHSA-2009:0397) Critical: firefox security update
2009-03-27 00:00:00
oraclelinux
oraclelinux
firefox security update
2009-03-29 00:00:00
seamonkey security update
2009-03-29 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-04-20 12:00:48
remote code execution in MozillaFirefox
2009-04-20 12:01:40
osv
osv
xulrunner - multiple vulnerabilities
2009-03-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.6

Confidence

High

EPSS

0.96

Percentile

99.5%

JSON
Related for CVE-2009-1169
openvas50prion1nvd1ubuntucve1checkpoint_advisories2mozilla1veracode1securityvulns2seebug1cvelist1exploitdb1fedora58nessus24debian2ubuntu1centos3redhat2oraclelinux2suse2osv1gentoo1