Home > Vulnerability Database > CVE-2009-3075

Mend.io Vulnerability Database

CVE-2009-3075

Date: September 10, 2009

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.

Severity Score

7.5

Related Resources (30)

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-3075

Url: http://secunia.com/advisories/38977

Url: http://www.vupen.com/english/advisories/2010/0650

Url: http://secunia.com/advisories/36671

Url: http://secunia.com/advisories/36692

Url: http://secunia.com/advisories/36670

Url: http://www.mozilla.org/security/announce/2010/mfsa2010-07.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-3075

Url: http://www.redhat.com/support/errata/RHSA-2009-1431.html

Url: http://www.ubuntu.com/usn/USN-915-1

Url: http://www.securityfocus.com/bid/36343

Url: http://secunia.com/advisories/37098

Url: https://access.redhat.com/security/cve/CVE-2009-3075

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717

Url: http://www.redhat.com/support/errata/RHSA-2010-0153.html

Url: http://www.novell.com/linux/security/advisories/2009_48_firefox.html

Url: http://www.redhat.com/support/errata/RHSA-2009-1430.html

Url: http://www.mozilla.org/security/announce/2009/mfsa2009-47.html

Url: http://www.debian.org/security/2009/dsa-1885

Url: http://secunia.com/advisories/36669

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=505305

Url: http://www.vupen.com/english/advisories/2010/0648

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=441714

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/53158

Url: http://secunia.com/advisories/39001

Url: http://www.redhat.com/support/errata/RHSA-2010-0154.html

Url: http://www.redhat.com/support/errata/RHSA-2009-1432.html

Url: https://www.mend.io/vulnerability-database/CVE-2009-3075

Severity Score

7.5

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

CVSS v3

Base Score:	7.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL

CVSS v2

Base Score:	5.3
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-3075

Date: September 10, 2009

Severity Score

Related Resources (30)

Severity Score

Weakness Type (CWE)

CVSS v3

CVSS v2

Do you need more information?