Home > Vulnerability Database > CVE-2009-3373

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2009-3373

Date: October 29, 2009

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.

Severity Score

9.8

Related Resources (11)

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-3373

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:294

Url: http://www.mozilla.org/security/announce/2009/mfsa2009-56.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=511689

Url: http://www.vupen.com/english/advisories/2009/3334

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-3373

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548

Url: https://access.redhat.com/security/cve/CVE-2009-3373

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1

Url: https://www.mend.io/vulnerability-database/CVE-2009-3373

Severity Score

9.8

Weakness Type (CWE)

Buffer Errors

CWE-119

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us