Lucene search

FlexeraCVE-2009-1571

HistoryFeb 22, 2010 - 1:00 p.m.

CVE-2009-1571

2010-02-2213:00:01

CWE-94

flexera

web.nvd.nist.gov

cve-2009-1571

mozilla firefox

thunderbird

seamonkey

html parser

use-after-free vulnerability

remote code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.8

Confidence

High

EPSS

0.151

Percentile

95.9%

JSON

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

Affected configurations

Nvd

Node

mozillafirefoxMatch3.0

mozillafirefoxMatch3.0alpha

mozillafirefoxMatch3.0beta2

mozillafirefoxMatch3.0beta5

mozillafirefoxMatch3.0.1

mozillafirefoxMatch3.0.2

mozillafirefoxMatch3.0.3

mozillafirefoxMatch3.0.4

mozillafirefoxMatch3.0.5

mozillafirefoxMatch3.0.6

mozillafirefoxMatch3.0.7

mozillafirefoxMatch3.0.8

mozillafirefoxMatch3.0.9

mozillafirefoxMatch3.0.10

mozillafirefoxMatch3.0.11

mozillafirefoxMatch3.0.12

mozillafirefoxMatch3.0.13

mozillafirefoxMatch3.0.14

mozillafirefoxMatch3.0.15

mozillafirefoxMatch3.0.17

mozillafirefoxMatch3.5

mozillafirefoxMatch3.5.1

mozillafirefoxMatch3.5.2

mozillafirefoxMatch3.5.3

mozillafirefoxMatch3.5.4

mozillafirefoxMatch3.5.5

mozillafirefoxMatch3.5.6

mozillafirefoxMatch3.5.7

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0alpha

mozillaseamonkeyMatch1.0beta

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.4

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillaseamonkeyMatch1.1.14

mozillaseamonkeyMatch1.1.15

mozillaseamonkeyMatch1.1.16

mozillaseamonkeyMatch1.1.17

mozillaseamonkeyMatch2.0

mozillaseamonkeyMatch2.0alpha_2

mozillaseamonkeyMatch2.0alpha_3

mozillaseamonkeyMatch2.0beta_1

mozillaseamonkeyMatch2.0beta_2

mozillaseamonkeyMatch2.0rc1

mozillaseamonkeyMatch2.0rc2

mozillaseamonkeyMatch2.0.1

mozillaseamonkeyMatch2.0.2

VendorProductVersionCPE
mozillaseamonkey2.0cpe:/a:mozilla:seamonkey:2.0:alpha_3::
mozillaseamonkey1.0.1cpe:/a:mozilla:seamonkey:1.0.1:::
mozillaseamonkey1.0.7cpe:/a:mozilla:seamonkey:1.0.7:::
mozillaseamonkey1.0cpe:/a:mozilla:seamonkey:1.0:alpha::
mozillafirefox3.0.2cpe:/a:mozilla:firefox:3.0.2:::
mozillaseamonkey1.0cpe:/a:mozilla:seamonkey:1.0:::
mozillafirefox3.0cpe:/a:mozilla:firefox:3.0:beta2::
mozillaseamonkey1.0.9cpe:/a:mozilla:seamonkey:1.0.9:::
mozillafirefox3.0cpe:/a:mozilla:firefox:3.0:alpha::
mozillaseamonkey1.1.1cpe:/a:mozilla:seamonkey:1.1.1:::

Vendor	Product	Version	CPE
mozilla	seamonkey	2.0	cpe:/a:mozilla:seamonkey:2.0:alpha_3::
mozilla	seamonkey	1.0.1	cpe:/a:mozilla:seamonkey:1.0.1:::
mozilla	seamonkey	1.0.7	cpe:/a:mozilla:seamonkey:1.0.7:::
mozilla	seamonkey	1.0	cpe:/a:mozilla:seamonkey:1.0:alpha::
mozilla	firefox	3.0.2	cpe:/a:mozilla:firefox:3.0.2:::
mozilla	seamonkey	1.0	cpe:/a:mozilla:seamonkey:1.0:::
mozilla	firefox	3.0	cpe:/a:mozilla:firefox:3.0:beta2::
mozilla	seamonkey	1.0.9	cpe:/a:mozilla:seamonkey:1.0.9:::
mozilla	firefox	3.0	cpe:/a:mozilla:firefox:3.0:alpha::
mozilla	seamonkey	1.1.1	cpe:/a:mozilla:seamonkey:1.1.1:::