Home > Vulnerability Database > CVE-2009-3075

Mend.io Vulnerability Database

CVE-2009-3075

Date: September 10, 2009

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.

Severity Score

9.8

Related Resources (30)

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-3075

Url: http://secunia.com/advisories/38977

Url: http://www.vupen.com/english/advisories/2010/0650

Url: http://secunia.com/advisories/36671

Url: http://secunia.com/advisories/36692

Url: http://secunia.com/advisories/36670

Url: http://www.mozilla.org/security/announce/2010/mfsa2010-07.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-3075

Url: http://www.redhat.com/support/errata/RHSA-2009-1431.html

Url: http://www.ubuntu.com/usn/USN-915-1

Url: http://www.securityfocus.com/bid/36343

Url: http://secunia.com/advisories/37098

Url: https://access.redhat.com/security/cve/CVE-2009-3075

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717

Url: http://www.redhat.com/support/errata/RHSA-2010-0153.html

Url: http://www.novell.com/linux/security/advisories/2009_48_firefox.html

Url: http://www.redhat.com/support/errata/RHSA-2009-1430.html

Url: http://www.mozilla.org/security/announce/2009/mfsa2009-47.html

Url: http://www.debian.org/security/2009/dsa-1885

Url: http://secunia.com/advisories/36669

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=505305

Url: http://www.vupen.com/english/advisories/2010/0648

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=441714

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/53158

Url: http://secunia.com/advisories/39001

Url: http://www.redhat.com/support/errata/RHSA-2010-0154.html

Url: http://www.redhat.com/support/errata/RHSA-2009-1432.html

Url: https://www.mend.io/vulnerability-database/CVE-2009-3075

Severity Score

9.8

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-3075

Date: September 10, 2009

Severity Score

Related Resources (30)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?