Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1571
HistoryFeb 22, 2010 - 1:00 p.m.

CVE-2009-1571

2010-02-2213:00:01
CWE-94
[email protected]
web.nvd.nist.gov
8

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.151

Percentile

95.9%

JSON

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

Affected configurations

Nvd
Node
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0alpha
OR
mozillafirefoxMatch3.0beta2
OR
mozillafirefoxMatch3.0beta5
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
OR
mozillafirefoxMatch3.0.6
OR
mozillafirefoxMatch3.0.7
OR
mozillafirefoxMatch3.0.8
OR
mozillafirefoxMatch3.0.9
OR
mozillafirefoxMatch3.0.10
OR
mozillafirefoxMatch3.0.11
OR
mozillafirefoxMatch3.0.12
OR
mozillafirefoxMatch3.0.13
OR
mozillafirefoxMatch3.0.14
OR
mozillafirefoxMatch3.0.15
OR
mozillafirefoxMatch3.0.17
OR
mozillafirefoxMatch3.5
OR
mozillafirefoxMatch3.5.1
OR
mozillafirefoxMatch3.5.2
OR
mozillafirefoxMatch3.5.3
OR
mozillafirefoxMatch3.5.4
OR
mozillafirefoxMatch3.5.5
OR
mozillafirefoxMatch3.5.6
OR
mozillafirefoxMatch3.5.7
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillaseamonkeyMatch1.1.13
OR
mozillaseamonkeyMatch1.1.14
OR
mozillaseamonkeyMatch1.1.15
OR
mozillaseamonkeyMatch1.1.16
OR
mozillaseamonkeyMatch1.1.17
OR
mozillaseamonkeyMatch2.0
OR
mozillaseamonkeyMatch2.0alpha_2
OR
mozillaseamonkeyMatch2.0alpha_3
OR
mozillaseamonkeyMatch2.0beta_1
OR
mozillaseamonkeyMatch2.0beta_2
OR
mozillaseamonkeyMatch2.0rc1
OR
mozillaseamonkeyMatch2.0rc2
OR
mozillaseamonkeyMatch2.0.1
OR
mozillaseamonkeyMatch2.0.2

References

Related

ubuntucve 1
mozilla 1
cve 4
nessus 29
openvas 102
veracode 1
prion 4
cvelist 4
securityvulns 3
seebug 1
nvd 3
fedora 34
redhat 2
oraclelinux 1
centos 1
ubuntu 2
osv 1
debian 3
freebsd 1
suse 1
ubuntucve
ubuntucve
CVE-2009-1571
2010-02-17 00:00:00
mozilla
mozilla
Use-after-free crash in HTML parser — Mozilla
2010-02-17 00:00:00
cve
cve
CVE-2009-1571
2010-02-22 13:00:01
CVE-2010-1988
2010-05-20 17:30:01
CVE-2010-1987
2010-05-20 17:30:01
nessus
nessus
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:051)
2010-03-02 00:00:00
Fedora 12 : sunbird-1.0-0.19.20090916hg.fc12 / thunderbird-3.0.2-1.fc12 (2010-3230)
2010-07-01 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
2010-02-15 00:00:00
Mandriva Update for mmc-web-base MDVA-2010:051 (mmc-web-base)
2010-02-15 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:051 (mozilla-thunderbird)
2010-03-12 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:42:20
prion
prion
Design/Logic Flaw
2010-02-22 13:00:00
Null pointer dereference
2010-05-20 17:30:00
Design/Logic Flaw
2010-05-20 17:30:00
cvelist
cvelist
CVE-2009-1571
2010-02-21 17:00:00
CVE-2010-1988
2010-05-20 17:00:00
CVE-2010-1987
2010-05-20 17:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-03
2010-02-19 00:00:00
Secunia Research: Mozilla Firefox Memory Corruption Vulnerability
2010-02-19 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-02-25 00:00:00
seebug
seebug
Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities
2010-05-25 00:00:00
nvd
nvd
CVE-2010-1987
2010-05-20 17:30:01
CVE-2010-1986
2010-05-20 17:30:01
CVE-2010-1988
2010-05-20 17:30:01
fedora
fedora
[SECURITY] Fedora 12 Update: thunderbird-3.0.2-1.fc12
2010-03-02 00:56:32
[SECURITY] Fedora 11 Update: sunbird-1.0-0.14.20090715hg.fc11
2010-03-02 01:02:35
[SECURITY] Fedora 12 Update: sunbird-1.0-0.19.20090916hg.fc12
2010-03-02 00:56:32
redhat
redhat
(RHSA-2010:0113) Critical: seamonkey security update
2010-02-17 00:00:00
(RHSA-2010:0112) Critical: firefox security update
2010-02-17 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2010-02-17 00:00:00
centos
centos
seamonkey security update
2010-02-18 00:29:51
ubuntu
ubuntu
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2010-02-17 00:00:00
Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
2010-02-17 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-02-18 00:00:00
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:11:52
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
2010-02-18 20:04:53
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:02:49
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-02-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey
2010-03-04 16:53:48

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.151

Percentile

95.9%

JSON
Related for NVD:CVE-2009-1571
ubuntucve1mozilla1cve4nessus29openvas102veracode1prion4cvelist4securityvulns3seebug1nvd3fedora34redhat2oraclelinux1centos1ubuntu2osv1debian3freebsd1suse1