Home > Vulnerability Database > CVE-2009-3072

Mend.io Vulnerability Database

CVE-2009-3072

Date: September 10, 2009

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.

Severity Score

9.8

Related Resources (30)

Url: http://secunia.com/advisories/38977

Url: http://www.vupen.com/english/advisories/2010/0650

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-3072

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-3072

Url: http://secunia.com/advisories/36671

Url: http://secunia.com/advisories/36692

Url: http://secunia.com/advisories/36670

Url: http://www.mozilla.org/security/announce/2010/mfsa2010-07.html

Url: https://access.redhat.com/security/cve/CVE-2009-3072

Url: http://www.redhat.com/support/errata/RHSA-2009-1431.html

Url: http://www.ubuntu.com/usn/USN-915-1

Url: http://www.securityfocus.com/bid/36343

Url: http://secunia.com/advisories/37098

Url: http://www.redhat.com/support/errata/RHSA-2010-0153.html

Url: http://www.novell.com/linux/security/advisories/2009_48_firefox.html

Url: http://www.redhat.com/support/errata/RHSA-2009-1430.html

Url: http://www.mozilla.org/security/announce/2009/mfsa2009-47.html

Url: http://www.debian.org/security/2009/dsa-1885

Url: http://secunia.com/advisories/36669

Url: http://www.vupen.com/english/advisories/2010/0648

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=501900

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=494283

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315

Url: http://secunia.com/advisories/39001

Url: http://www.redhat.com/support/errata/RHSA-2010-0154.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=508074

Url: http://www.redhat.com/support/errata/RHSA-2009-1432.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349

Url: https://www.mend.io/vulnerability-database/CVE-2009-3072

Severity Score

9.8

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-3072

Date: September 10, 2009

Severity Score

Related Resources (30)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?