Lucene search

MitreCVE-2009-3388

HistoryDec 17, 2009 - 5:30 p.m.

CVE-2009-3388

2009-12-1717:30:00

CWE-399

mitre

web.nvd.nist.gov

liboggplay

mozilla firefox

seamonkey

denial of service

arbitrary code

cve-2009-3388

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.8

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to “memory safety issues.”

Affected configurations

Nvd

Node

mozillafirefoxMatch3.5.1

mozillafirefoxMatch3.5.2

mozillafirefoxMatch3.5.3

mozillafirefoxMatch3.5.4

mozillafirefoxMatch3.5.5

mozillaseamonkeyRange≤2.0rc2

mozillaseamonkeyMatch1.0

mozillaseamonkeyMatch1.0alpha

mozillaseamonkeyMatch1.0beta

mozillaseamonkeyMatch1.0.1

mozillaseamonkeyMatch1.0.2

mozillaseamonkeyMatch1.0.3

mozillaseamonkeyMatch1.0.4

mozillaseamonkeyMatch1.0.5

mozillaseamonkeyMatch1.0.6

mozillaseamonkeyMatch1.0.7

mozillaseamonkeyMatch1.0.8

mozillaseamonkeyMatch1.0.9

mozillaseamonkeyMatch1.0.99

mozillaseamonkeyMatch1.1

mozillaseamonkeyMatch1.1alpha

mozillaseamonkeyMatch1.1beta

mozillaseamonkeyMatch1.1.1

mozillaseamonkeyMatch1.1.2

mozillaseamonkeyMatch1.1.3

mozillaseamonkeyMatch1.1.4

mozillaseamonkeyMatch1.1.5

mozillaseamonkeyMatch1.1.6

mozillaseamonkeyMatch1.1.7

mozillaseamonkeyMatch1.1.8

mozillaseamonkeyMatch1.1.9

mozillaseamonkeyMatch1.1.10

mozillaseamonkeyMatch1.1.11

mozillaseamonkeyMatch1.1.12

mozillaseamonkeyMatch1.1.13

mozillaseamonkeyMatch1.1.14

mozillaseamonkeyMatch1.1.15

mozillaseamonkeyMatch1.1.16

mozillaseamonkeyMatch1.1.17

mozillaseamonkeyMatch1.5.0.8

mozillaseamonkeyMatch1.5.0.9

mozillaseamonkeyMatch1.5.0.10

mozillaseamonkeyMatch2.0

mozillaseamonkeyMatch2.0alpha_1

mozillaseamonkeyMatch2.0alpha_2

mozillaseamonkeyMatch2.0alpha_3

mozillaseamonkeyMatch2.0beta_1

mozillaseamonkeyMatch2.0beta_2

mozillaseamonkeyMatch2.0rc1

mozillaseamonkeyMatch2.0a1pre

VendorProductVersionCPE
mozillafirefox3.5.1cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*
mozillafirefox3.5.2cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*
mozillafirefox3.5.3cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*
mozillafirefox3.5.4cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*
mozillafirefox3.5.5cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:rc2:*:*:*:*:*:*
mozillaseamonkey1.0cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*
mozillaseamonkey1.0cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*
mozillaseamonkey1.0cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*
mozillaseamonkey1.0.1cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	3.5.1	cpe:2.3:a:mozilla:firefox:3.5.1:::::::*
mozilla	firefox	3.5.2	cpe:2.3:a:mozilla:firefox:3.5.2:::::::*
mozilla	firefox	3.5.3	cpe:2.3:a:mozilla:firefox:3.5.3:::::::*
mozilla	firefox	3.5.4	cpe:2.3:a:mozilla:firefox:3.5.4:::::::*
mozilla	firefox	3.5.5	cpe:2.3:a:mozilla:firefox:3.5.5:::::::*
mozilla	seamonkey	*	cpe:2.3:a:mozilla:seamonkey::rc2::::::*
mozilla	seamonkey	1.0	cpe:2.3:a:mozilla:seamonkey:1.0:::::::*
mozilla	seamonkey	1.0	cpe:2.3:a:mozilla:seamonkey:1.0:alpha::::::
mozilla	seamonkey	1.0	cpe:2.3:a:mozilla:seamonkey:1.0:beta::::::
mozilla	seamonkey	1.0.1	cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::*