CVE-2009-3072

Firefox 3.5.3 3.0.14 browser engine crashes

Published Sep 10, 2009 CVSS 2.0 · 10.0 Critical EPSS 5.3% KEV · Not listed
Description
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1885-1 New xulrunner packages fix several vulnerabilities
Debian DSA Debian DSA DSA-2025-1 New icedove packages fix several vulnerabilities
EUVD EUVD EUVD-2009-3056 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.
Ubuntu USN Ubuntu USN USN-821-1 Firefox and Xulrunner vulnerabilities
Ubuntu USN Ubuntu USN USN-915-1 Thunderbird vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 6:14 AM
Reserved
Sep 4, 2009, 12:00 AM
Status
Modified
Published
Sep 10, 2009, 9:30 PM
Modified
Jun 16, 2026, 11:10 PM
Severity
Critical
Public date
Sep 9, 2009, 12:00 AM