Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-2404
HistoryAug 03, 2009 - 2:30 p.m.

CVE-2009-2404

2009-08-0314:30:00
CWE-119
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.604 Medium

EPSS

Percentile

97.8%

JSON

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject’s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.

Affected configurations

NVD
Node
mozillanetwork_security_servicesMatch3.12.3
AND
aolinstant_messenger
OR
gnomeevolution
OR
mozillafirefox
OR
mozillaseamonkey
OR
mozillathunderbird
OR
pidginpidgin

References

Related

openvas 48
checkpoint_advisories 2
veracode 1
nessus 34
mozilla 1
centos 1
cvelist 1
ubuntucve 1
securityvulns 3
prion 1
debiancve 1
cve 1
redhat 5
seebug 1
ubuntu 3
oraclelinux 2
debian 2
osv 2
freebsd 1
vmware 2
suse 1
rosalinux 1
oracle 1
gentoo 1
openvas
openvas
RedHat Security Advisory RHSA-2009:1185
2009-08-17 00:00:00
Multiple Products NSS Library Buffer Overflow Vulnerability
2009-08-11 00:00:00
CentOS Security Advisory CESA-2009:1185 (seamonkey)
2009-08-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Network Security Services Regexp Heap Overflow - Improved Performance (CVE-2009-2404)
2013-05-08 00:00:00
Mozilla Network Security Services Regexp Heap Overflow (CVE-2009-2404)
2009-08-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:33:39
nessus
nessus
Scientific Linux Security Update : seamonkey on SL3.x i386/x86_64
2012-08-01 00:00:00
RHEL 3 : seamonkey (RHSA-2009:1185)
2009-07-31 00:00:00
CentOS 3 : seamonkey (CESA-2009:1185)
2009-07-31 00:00:00
mozilla
mozilla
Heap overflow in certificate regexp parsing β€” Mozilla
2009-08-01 00:00:00
centos
centos
seamonkey security update
2009-07-31 00:33:31
cvelist
cvelist
CVE-2009-2404
2009-08-03 14:00:00
ubuntucve
ubuntucve
CVE-2009-2404
2009-08-03 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-43
2009-08-07 00:00:00
Mozilla Firefox, Thunderbird, SeaMonkey, NSS multiple security vulnerabilities
2009-08-07 00:00:00
Oracle / Sun applications multiple security ulnerabilities
2010-04-17 00:00:00
prion
prion
Heap overflow
2009-08-03 14:30:00
debiancve
debiancve
CVE-2009-2404
2009-08-03 14:30:00
cve
cve
CVE-2009-2404
2009-08-03 14:30:00
redhat
redhat
(RHSA-2009:1185) Critical: seamonkey security update
2009-07-30 00:00:00
(RHSA-2009:1184) Critical: nspr and nss security and bug fix update
2009-07-30 00:00:00
(RHSA-2009:1186) Critical: nspr and nss security, bug fix, and enhancement update
2009-07-30 00:00:00
seebug
seebug
Mozilla SeaMonkeyθ§„εˆ™θ‘¨θΎΎεΌθ§£ζžε †ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2009-07-31 00:00:00
ubuntu
ubuntu
NSS vulnerabilities
2009-08-04 00:00:00
NSPR update
2009-08-04 00:00:00
NSS regression
2009-09-02 00:00:00
oraclelinux
oraclelinux
nspr and nss security, bug fix, and enhancement update
2009-07-21 00:00:00
nspr and nss security and bug fix update
2009-07-30 00:00:00
debian
debian
[SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities
2009-08-26 19:01:32
[SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities
2010-03-31 08:41:27
osv
osv
nss - several vulnerabilities
2009-08-26 00:00:00
icedove - several vulnerabilities
2010-03-31 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-08-03 00:00:00
vmware
vmware
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
ESX Service Console and vMA updates for nss and nspr
2010-03-03 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-10-20 17:59:46
rosalinux
rosalinux
Advisory ROSA-SA-2024-2370
2024-03-12 08:35:15
oracle
oracle
Security | Oracle Critical Patch Update - April 2010
2010-04-13 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.604 Medium

EPSS

Percentile

97.8%

JSON
Related for NVD:CVE-2009-2404
openvas48checkpoint_advisories2veracode1nessus34mozilla1centos1cvelist1ubuntucve1securityvulns3prion1debiancve1cve1redhat5seebug1ubuntu3oraclelinux2debian2osv2freebsd1vmware2suse1rosalinux1oracle1gentoo1