Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable801300.PRM
HistoryAug 04, 2009 - 12:00 a.m.

Mozilla Firefox < 3.5.2/3.0.12 Multiple Vulnerabilities

2009-08-0400:00:00
Tenable
www.tenable.com
9

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.026

Percentile

90.4%

JSON

The installed version of Mozilla Firefox is earlier than 3.5.2/3.0.12. Such versions are potentially affected by multiple issues :

  • A denial-of-service vulnerability when Firefox receives a reply from a SOCKS5 proxy which contains a DNS name longer than 15 characters. (CVE-2009-2470)

  • Multiple flaws exist in the ‘libvorbis’ library could lead to remote code execution. (CVE-2009-2663)

Binary data 801300.prm

Related

nessus 43
openvas 52
securityvulns 4
mozilla 3
nvd 3
cvelist 3
prion 3
veracode 2
ubuntucve 3
cve 3
fedora 4
centos 5
debiancve 2
gentoo 2
oraclelinux 4
redhat 5
ubuntu 1
debian 1
freebsd 1
suse 1
nessus
nessus
Mozilla Firefox < 3.5.2/3.0.12 Multiple Vulnerabilities
2009-08-04 00:00:00
SuSE 10 Security Update : libvorbis (ZYPP Patch Number 7057)
2010-10-11 00:00:00
Oracle Linux 3 / 4 / 5 : libvorbis (ELSA-2009-1219)
2013-07-12 00:00:00
openvas
openvas
Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 (Windows)
2009-08-07 00:00:00
Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability (Aug 2009) - Windows
2009-08-07 00:00:00
Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability (Aug 2009) - Linux
2009-08-07 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-38
2009-08-07 00:00:00
[USN-825-1] libvorbis vulnerability
2009-08-25 00:00:00
Mozilla Firefox, Thunderbird, SeaMonkey, NSS multiple security vulnerabilities
2009-08-07 00:00:00
mozilla
mozilla
Data corruption with SOCKS5 reply containing DNS name longer than 15 characters — Mozilla
2009-07-21 00:00:00
Crashes with evidence of memory corruption (rv:1.9.1.2/1.9.0.13) — Mozilla
2009-08-03 00:00:00
Upgrade media libraries to fix memory safety bugs — Mozilla
2009-10-27 00:00:00
nvd
nvd
CVE-2009-2470
2009-08-04 16:30:00
CVE-2009-2663
2009-08-04 16:30:00
CVE-2009-3379
2009-10-29 14:30:01
cvelist
cvelist
CVE-2009-2470
2009-08-04 16:13:00
CVE-2009-2663
2009-08-04 16:13:00
CVE-2009-3379
2009-10-29 14:00:00
prion
prion
Design/Logic Flaw
2009-08-04 16:30:00
Memory corruption
2009-08-04 16:30:00
Code injection
2009-10-29 14:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:36:34
Arbitrary Code Execution
2020-04-10 00:35:42
ubuntucve
ubuntucve
CVE-2009-2470
2009-08-04 00:00:00
CVE-2009-2663
2009-08-04 00:00:00
CVE-2009-3379
2009-10-29 00:00:00
cve
cve
CVE-2009-2470
2009-08-04 16:30:00
CVE-2009-2663
2009-08-04 16:30:00
CVE-2009-3379
2009-10-29 14:30:01
fedora
fedora
[SECURITY] Fedora 11 Update: libvorbis-1.2.0-8.fc11
2009-08-10 21:51:43
[SECURITY] Fedora 10 Update: libvorbis-1.2.0-6.fc10
2009-08-10 21:50:41
[SECURITY] Fedora 10 Update: libvorbis-1.2.0-7.fc10
2009-11-10 17:43:32
centos
centos
libvorbis security update
2009-08-18 19:17:02
seamonkey security update
2009-07-22 22:37:56
firefox, xulrunner security update
2009-07-28 12:22:37
debiancve
debiancve
CVE-2009-2663
2009-08-04 16:30:00
CVE-2009-3379
2009-10-29 14:30:01
gentoo
gentoo
libvorbis: User-assisted execution of arbitrary code
2009-09-07 00:00:00
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
oraclelinux
oraclelinux
libvorbis security update
2009-08-18 00:00:00
seamonkey security update
2009-07-22 00:00:00
firefox security update
2009-07-22 00:00:00
redhat
redhat
(RHSA-2009:1219) Important: libvorbis security update
2009-08-18 00:00:00
(RHSA-2009:1163) Critical: seamonkey security update
2009-07-21 00:00:00
(RHSA-2009:1162) Critical: firefox security update
2009-07-21 00:00:00
ubuntu
ubuntu
libvorbis vulnerability
2009-08-24 00:00:00
debian
debian
[SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities
2009-11-24 22:41:13
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-08-03 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-10-20 17:59:46

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.026

Percentile

90.4%

JSON
Related for 801300.PRM
nessus43openvas52securityvulns4mozilla3nvd3cvelist3prion3veracode2ubuntucve3cve3fedora4centos5debiancve2gentoo2oraclelinux4redhat5ubuntu1debian1freebsd1suse1