CVE-2009-0353
published 2009-02-04CVE-2009-0353: Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a…
PriorityP334critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
4.33%
90.1th percentile
Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.
Affected
66 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | seamonkey | <= 1.1.13 | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
| mozilla | seamonkey | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
vendor_ubuntu10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox and Xulrunner vulnerabilities
vendor_ubuntu·2009-02-10·CVSS 10.0
CVE-2009-0352 [CRITICAL] Firefox and Xulrunner vulnerabilities
Title: Firefox and Xulrunner vulnerabilities
Summary: Firefox and Xulrunner vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2009-0352, CVE-2009-0353)
A flaw was discovered in the JavaScript engine. An attacker could bypass the
same-origin policy in Firefox by utilizing a chrome XBL method and execute
arbitrary JavaScript within the context of another website. (CVE-2009-0354)
A flaw was discovered in the browser engine when restoring closed tabs. If a
user were tricked into restoring a tab to a malicious website with form input
controls, an attacker could steal local files on the user's system.
(CVE-2009-0355)
Wladimir Palant discovered that Fi
Red Hat
Firefox javascript crashes with evidence of memory corruption
vendor_redhat·2009-02-03·CVSS 10.0
CVE-2009-0353 [CRITICAL] Firefox javascript crashes with evidence of memory corruption
Firefox javascript crashes with evidence of memory corruption
Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.
GHSA
GHSA-xmr3-m6h9-383p: Unspecified vulnerability in Mozilla Firefox 3
ghsa_unreviewed·2022-05-02
CVE-2009-0353 [HIGH] GHSA-xmr3-m6h9-383p: Unspecified vulnerability in Mozilla Firefox 3
Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0256.htmlhttp://secunia.com/advisories/33799http://secunia.com/advisories/33802http://secunia.com/advisories/33808http://secunia.com/advisories/33809http://secunia.com/advisories/33816http://secunia.com/advisories/33831http://secunia.com/advisories/33841http://secunia.com/advisories/33846http://secunia.com/advisories/33869http://secunia.com/advisories/34324http://secunia.com/advisories/34417http://secunia.com/advisories/34462http://secunia.com/advisories/34464http://secunia.com/advisories/34527http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952http://support.avaya.com/elmodocs2/security/ASA-2009-040.htmhttp://www.debian.org/security/2009/dsa-1830http://www.mandriva.com/security/advisories?name=MDVSA-2009:044http://www.mandriva.com/security/advisories?name=MDVSA-2009:083http://www.mozilla.org/security/announce/2009/mfsa2009-01.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0257.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0258.htmlhttp://www.securityfocus.com/bid/33598http://www.securitytracker.com/id?1021663http://www.ubuntu.com/usn/usn-717-1http://www.vupen.com/english/advisories/2009/0313https://bugzilla.mozilla.org/show_bug.cgi?id=452913https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0256.htmlhttp://secunia.com/advisories/33799http://secunia.com/advisories/33802http://secunia.com/advisories/33808http://secunia.com/advisories/33809http://secunia.com/advisories/33816http://secunia.com/advisories/33831http://secunia.com/advisories/33841http://secunia.com/advisories/33846http://secunia.com/advisories/33869http://secunia.com/advisories/34324http://secunia.com/advisories/34417http://secunia.com/advisories/34462http://secunia.com/advisories/34464http://secunia.com/advisories/34527http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952http://support.avaya.com/elmodocs2/security/ASA-2009-040.htmhttp://www.debian.org/security/2009/dsa-1830http://www.mandriva.com/security/advisories?name=MDVSA-2009:044http://www.mandriva.com/security/advisories?name=MDVSA-2009:083http://www.mozilla.org/security/announce/2009/mfsa2009-01.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0257.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0258.htmlhttp://www.securityfocus.com/bid/33598http://www.securitytracker.com/id?1021663http://www.ubuntu.com/usn/usn-717-1http://www.vupen.com/english/advisories/2009/0313https://bugzilla.mozilla.org/show_bug.cgi?id=452913https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11193https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html
2009-02-04
Published