Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mozillaMozilla FoundationMFSA2009-24
HistoryJun 11, 2009 - 12:00 a.m.

Crashes with evidence of memory corruption (rv:1.9.0.11) — Mozilla

2009-06-1100:00:00
Mozilla Foundation
www.mozilla.org
36

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.941

Percentile

99.2%

JSON

Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Affected configurations

Vulners
Node
mozillafirefoxRange<3.0.11
OR
mozillaseamonkeyRange<1.1.17
OR
mozillathunderbirdRange<2.0.0.22

Related

securityvulns 2
openvas 74
checkpoint_advisories 2
ubuntucve 3
nessus 41
nvd 3
cvelist 3
cve 3
veracode 3
redhat 4
oraclelinux 3
prion 3
centos 3
fedora 41
osv 2
ubuntu 2
suse 1
freebsd 1
debian 2
gentoo 1
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-24
2009-06-14 00:00:00
Mozilla Firefox multiple security vulnerabilities
2009-06-14 00:00:00
openvas
openvas
Mozilla Thunderbird Multiple Vulnerability Jun-09 (Windows)
2009-06-16 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities (Jun 2009) - Linux
2009-06-16 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities (Jun 2009) - Windows
2009-06-16 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Mozilla Firefox Browser Engine Memory Corruption
2010-03-25 00:00:00
Mozilla Firefox Browser CSS style Engine Memory Corruption (CVE-2009-1392)
2010-07-25 00:00:00
ubuntucve
ubuntucve
CVE-2009-1392
2009-06-12 00:00:00
CVE-2009-1832
2009-06-12 00:00:00
CVE-2009-1833
2009-06-12 00:00:00
nessus
nessus
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1096)
2013-07-12 00:00:00
CentOS 3 : seamonkey (CESA-2009:1096)
2009-06-15 00:00:00
RHEL 4 : seamonkey (RHSA-2009:1096)
2009-06-12 00:00:00
nvd
nvd
CVE-2009-1832
2009-06-12 21:30:00
CVE-2009-1392
2009-06-12 21:30:00
CVE-2009-1833
2009-06-12 21:30:00
cvelist
cvelist
CVE-2009-1832
2009-06-12 21:07:00
CVE-2009-1392
2009-06-12 21:07:00
CVE-2009-1833
2009-06-12 21:07:00
cve
cve
CVE-2009-1392
2009-06-12 21:30:00
CVE-2009-1832
2009-06-12 21:30:00
CVE-2009-1833
2009-06-12 21:30:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:33:44
Arbitrary Code Execution
2020-04-10 00:33:01
Arbitrary Code Execution
2020-04-10 00:33:02
redhat
redhat
(RHSA-2009:1096) Critical: seamonkey security update
2009-06-11 00:00:00
(RHSA-2009:1095) Critical: firefox security update
2009-06-11 00:00:00
(RHSA-2009:1125) Moderate: thunderbird security update
2009-06-25 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-06-12 00:00:00
firefox security update
2009-06-12 00:00:00
thunderbird security update
2009-06-25 00:00:00
prion
prion
Memory corruption
2009-06-12 21:30:00
Memory corruption
2009-06-12 21:30:00
Memory corruption
2009-06-12 21:30:00
centos
centos
seamonkey security update
2009-06-12 21:25:45
firefox, xulrunner security update
2009-06-19 11:07:44
thunderbird security update
2009-06-26 14:08:25
fedora
fedora
[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-12.fc9
2009-06-16 02:33:47
[SECURITY] Fedora 9 Update: mugshot-1.2.2-10.fc9
2009-06-16 02:33:47
[SECURITY] Fedora 9 Update: kazehakase-0.5.6-4.fc9.3
2009-06-16 02:33:47
osv
osv
xulrunner - several vulnerabilities
2009-06-18 00:00:00
icedove - several vulnerabilities
2009-07-12 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-06-12 00:00:00
Thunderbird vulnerabilities
2009-06-25 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-06-16 16:38:22
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-06-11 00:00:00
debian
debian
[SECURITY] [DSA 1820-1] New xulrunner packages fix several vulnerabilities
2009-06-18 14:13:03
[SECURITY] [DSA 1830-1] New icedove packages fix several vulnerabilities
2009-07-12 11:21:02
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.941

Percentile

99.2%

JSON
Related for MFSA2009-24
securityvulns2openvas74checkpoint_advisories2ubuntucve3nessus41nvd3cvelist3cve3veracode3redhat4oraclelinux3prion3centos3fedora41osv2ubuntu2suse1freebsd1debian2gentoo1