CVE-2009-2044: Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the…

PriorityP418medium4.3CVSS 2.0

AVNACMAuNCNINAP

EXPLOIT

EPSS

5.89%

92.3th percentile

Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
cairographics	cairo	>= 0 < 1.8.8-2	1.8.8-2
cairographics	cairo	>= 0 < 1.8.8-2	1.8.8-2
cairographics	cairo	>= 0 < 1.8.8-2	1.8.8-2
cairographics	cairo	>= 0 < 1.8.8-2	1.8.8-2
debian	cairo	< cairo 1.8.8-2 (bookworm)	cairo 1.8.8-2 (bookworm)
mozilla	firefox	<= 3.0.10	—

CVSS provenance

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

osv4.3MEDIUM

vendor_debian4.3LOW

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.