Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-2043 — Improper Input Validation in Mozilla Firefox

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
3.7%
top 11.98%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Mozilla Firefox
Timeline
PublishedJun 12
Latest updateMay 2

Description

nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to interaction with TinyMCE.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox9 versions+8

🔴Vulnerability Details

1
GHSA
GHSA-7ww8-h9c7-wx7c: nsViewManager↗2022-05-02
▶

💥Exploits & PoCs

1
Exploit-DB
Mozilla Firefox 3.0.10 - 'nsViewManager.cpp' Denial of Service↗2009-05-11
▶