CVE-2009-3069

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
3.5
mozillafirefox
3.5.1
mozillafirefox
3.5.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox-3.5
dapper
dne
hardy
dne
intrepid
dne
jaunty
Fixed 3.5.3+build1+nobinonly-0ubuntu0.9.04.2
released
xulrunner-1.9.1
dapper
dne
hardy
dne
intrepid
dne
jaunty
Fixed 1.9.1.3+build1+nobinonly-0ubuntu0.9.04.2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
MozillaFirefox-translations-common
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
References
http://secunia.com/advisories/36671
http://secunia.com/advisories/37098
http://www.mozilla.org/security/announce/2009/mfsa2009-47.html
http://www.novell.com/linux/security/advisories/2009_48_firefox.html
http://www.securityfocus.com/bid/36343
https://bugzilla.mozilla.org/show_bug.cgi?id=506838
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5989
http://secunia.com/advisories/36671
http://secunia.com/advisories/37098
http://www.mozilla.org/security/announce/2009/mfsa2009-47.html
http://www.novell.com/linux/security/advisories/2009_48_firefox.html
http://www.securityfocus.com/bid/36343
https://bugzilla.mozilla.org/show_bug.cgi?id=506838
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5989