CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
95.2%
Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3980
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3981
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3982
bugzilla.mozilla.org/buglist.cgi?bug_id=495875,470487
bugzilla.mozilla.org/buglist.cgi?bug_id=510518,513981,514999,524121
bugzilla.mozilla.org/buglist.cgi?bug_id=515811,522374,457514,506267,479931,293347,494617,516237
bugzilla.mozilla.org/show_bug.cgi?id=468771