csaf_redhat - rhsa-2010

rhsa-2010_0154

Vulnerability from csaf_redhat

Published

2010-03-17 13:04

Modified

2024-11-22 03:23

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-2462, CVE-2009-2463, CVE-2009-2466, CVE-2009-3072, CVE-2009-3075, CVE-2009-3380, CVE-2009-3979, CVE-2010-0159) A use-after-free flaw was found in Thunderbird. An attacker could use this flaw to crash Thunderbird or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-3077) A heap-based buffer overflow flaw was found in the Thunderbird string to floating point conversion routines. An HTML mail message containing malicious JavaScript could crash Thunderbird or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-0689) A use-after-free flaw was found in Thunderbird. Under low memory conditions, viewing an HTML mail message containing malicious content could result in Thunderbird executing arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-1571) A flaw was found in the way Thunderbird created temporary file names for downloaded files. If a local attacker knows the name of a file Thunderbird is going to download, they can replace the contents of that file with arbitrary contents. (CVE-2009-3274) A flaw was found in the way Thunderbird displayed a right-to-left override character when downloading a file. In these cases, the name displayed in the title bar differed from the name displayed in the dialog body. An attacker could use this flaw to trick a user into downloading a file that has a file name or extension that is different from what the user expected. (CVE-2009-3376) A flaw was found in the way Thunderbird processed SOCKS5 proxy replies. A malicious SOCKS5 server could send a specially-crafted reply that would cause Thunderbird to crash. (CVE-2009-2470) Descriptions in the dialogs when adding and removing PKCS #11 modules were not informative. An attacker able to trick a user into installing a malicious PKCS #11 module could use this flaw to install their own Certificate Authority certificates on a user's machine, making it possible to trick the user into believing they are viewing trusted content or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-3076) All Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes several security issues is now\navailable for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML mail content.\nAn HTML mail message containing malicious content could cause Thunderbird\nto crash or, potentially, execute arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2009-2462, CVE-2009-2463, CVE-2009-2466,\nCVE-2009-3072, CVE-2009-3075, CVE-2009-3380, CVE-2009-3979, CVE-2010-0159)\n\nA use-after-free flaw was found in Thunderbird. An attacker could use this\nflaw to crash Thunderbird or, potentially, execute arbitrary code with the\nprivileges of the user running Thunderbird. (CVE-2009-3077)\n\nA heap-based buffer overflow flaw was found in the Thunderbird string to\nfloating point conversion routines. An HTML mail message containing\nmalicious JavaScript could crash Thunderbird or, potentially, execute\narbitrary code with the privileges of the user running Thunderbird.\n(CVE-2009-0689)\n\nA use-after-free flaw was found in Thunderbird. Under low memory\nconditions, viewing an HTML mail message containing malicious content could\nresult in Thunderbird executing arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2009-1571)\n\nA flaw was found in the way Thunderbird created temporary file names for\ndownloaded files. If a local attacker knows the name of a file Thunderbird\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the way Thunderbird displayed a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differed from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that is different from what the user expected.\n(CVE-2009-3376)\n\nA flaw was found in the way Thunderbird processed SOCKS5 proxy replies. A\nmalicious SOCKS5 server could send a specially-crafted reply that would\ncause Thunderbird to crash. (CVE-2009-2470)\n\nDescriptions in the dialogs when adding and removing PKCS #11 modules were\nnot informative. An attacker able to trick a user into installing a\nmalicious PKCS #11 module could use this flaw to install their own\nCertificate Authority certificates on a user\u0027s machine, making it possible\nto trick the user into believing they are viewing trusted content or,\npotentially, execute arbitrary code with the privileges of the user running\nThunderbird. (CVE-2009-3076)\n\nAll Thunderbird users should upgrade to this updated package, which\nresolves these issues. All running instances of Thunderbird must be\nrestarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0154",
        "url": "https://access.redhat.com/errata/RHSA-2010:0154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "512128",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512128"
      },
      {
        "category": "external",
        "summary": "512131",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512131"
      },
      {
        "category": "external",
        "summary": "512136",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512136"
      },
      {
        "category": "external",
        "summary": "512145",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512145"
      },
      {
        "category": "external",
        "summary": "521688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
      },
      {
        "category": "external",
        "summary": "521691",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
      },
      {
        "category": "external",
        "summary": "521692",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
      },
      {
        "category": "external",
        "summary": "521693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
      },
      {
        "category": "external",
        "summary": "524815",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=524815"
      },
      {
        "category": "external",
        "summary": "530162",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530162"
      },
      {
        "category": "external",
        "summary": "530168",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530168"
      },
      {
        "category": "external",
        "summary": "530567",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530567"
      },
      {
        "category": "external",
        "summary": "546694",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
      },
      {
        "category": "external",
        "summary": "566047",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566047"
      },
      {
        "category": "external",
        "summary": "566050",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566050"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0154.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T03:23:17+00:00",
      "generator": {
        "date": "2024-11-22T03:23:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2010:0154",
      "initial_release_date": "2010-03-17T13:04:00+00:00",
      "revision_history": [
        {
          "date": "2010-03-17T13:04:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-03-17T09:22:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T03:23:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.ia64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.ia64",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.src",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.x86_64",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.i386",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.ppc",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.ppc",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.s390x",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.s390x",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.s390",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.s390",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-0689",
      "discovery_date": "2009-11-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "539784"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "array index error in dtoa implementation of many products",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0689"
        },
        {
          "category": "external",
          "summary": "RHBZ#539784",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=539784"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0689",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0689"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0689",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0689"
        }
      ],
      "release_date": "2009-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "array index error in dtoa implementation of many products"
    },
    {
      "cve": "CVE-2009-1571",
      "discovery_date": "2010-02-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "566050"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla incorrectly frees used memory (MFSA 2010-03)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1571"
        },
        {
          "category": "external",
          "summary": "RHBZ#566050",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566050"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1571",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1571"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1571",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1571"
        }
      ],
      "release_date": "2010-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla incorrectly frees used memory (MFSA 2010-03)"
    },
    {
      "cve": "CVE-2009-2462",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512128"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Browser engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2462"
        },
        {
          "category": "external",
          "summary": "RHBZ#512128",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512128"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2462"
        }
      ],
      "release_date": "2009-07-21T23:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Browser engine crashes"
    },
    {
      "cve": "CVE-2009-2463",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Base64 decoding crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2463"
        },
        {
          "category": "external",
          "summary": "RHBZ#512131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2463",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2463"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2463",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2463"
        }
      ],
      "release_date": "2009-07-21T23:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Base64 decoding crash"
    },
    {
      "cve": "CVE-2009-2466",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512136"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla JavaScript engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2466"
        },
        {
          "category": "external",
          "summary": "RHBZ#512136",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512136"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2466",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2466"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2466",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2466"
        }
      ],
      "release_date": "2009-07-21T23:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla JavaScript engine crashes"
    },
    {
      "cve": "CVE-2009-2470",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512145"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla data corruption with SOCKS5 reply",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2470"
        },
        {
          "category": "external",
          "summary": "RHBZ#512145",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512145"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2470",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2470"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2470",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2470"
        }
      ],
      "release_date": "2009-07-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Mozilla data corruption with SOCKS5 reply"
    },
    {
      "cve": "CVE-2009-3072",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.5.3 3.0.14 browser engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3072"
        },
        {
          "category": "external",
          "summary": "RHBZ#521688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox 3.5.3 3.0.14 browser engine crashes"
    },
    {
      "cve": "CVE-2009-3075",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521691"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.5.2 3.0.14 JavaScript engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3075"
        },
        {
          "category": "external",
          "summary": "RHBZ#521691",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3075",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3075"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox 3.5.2 3.0.14 JavaScript engine crashes"
    },
    {
      "cve": "CVE-2009-3076",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521692"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3076"
        },
        {
          "category": "external",
          "summary": "RHBZ#521692",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3076",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3076"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal"
    },
    {
      "cve": "CVE-2009-3077",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521693"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3077"
        },
        {
          "category": "external",
          "summary": "RHBZ#521693",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3077",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3077"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability"
    },
    {
      "cve": "CVE-2009-3274",
      "discovery_date": "2009-09-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "524815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox: Predictable /tmp pathname use",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3274"
        },
        {
          "category": "external",
          "summary": "RHBZ#524815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=524815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3274",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3274"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3274",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3274"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Firefox: Predictable /tmp pathname use"
    },
    {
      "cve": "CVE-2009-3376",
      "discovery_date": "2009-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "530168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox download filename spoofing with RTL override",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3376"
        },
        {
          "category": "external",
          "summary": "RHBZ#530168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3376"
        }
      ],
      "release_date": "2009-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Firefox download filename spoofing with RTL override"
    },
    {
      "cve": "CVE-2009-3380",
      "discovery_date": "2009-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "530567"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3380"
        },
        {
          "category": "external",
          "summary": "RHBZ#530567",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530567"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3380"
        }
      ],
      "release_date": "2009-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox crashes with evidence of memory corruption"
    },
    {
      "cve": "CVE-2009-3384",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "530164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox integer underflow in FTP directory list parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3384"
        },
        {
          "category": "external",
          "summary": "RHBZ#530164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3384"
        }
      ],
      "release_date": "2009-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox integer underflow in FTP directory list parser"
    },
    {
      "cve": "CVE-2009-3979",
      "discovery_date": "2009-12-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "546694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3979"
        },
        {
          "category": "external",
          "summary": "RHBZ#546694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3979"
        }
      ],
      "release_date": "2009-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash with evidence of memory corruption"
    },
    {
      "cve": "CVE-2010-0159",
      "discovery_date": "2010-02-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "566047"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crashes with evidence of memory corruption (MFSA 2010-01)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0159"
        },
        {
          "category": "external",
          "summary": "RHBZ#566047",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566047"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0159",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0159"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0159",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0159"
        }
      ],
      "release_date": "2010-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crashes with evidence of memory corruption (MFSA 2010-01)"
    },
    {
      "cve": "CVE-2010-0163",
      "discovery_date": "2010-03-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "576391"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "seamonkey/thunderbird: crash when indexing certain messages with attachments",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0163"
        },
        {
          "category": "external",
          "summary": "RHBZ#576391",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=576391"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0163"
        }
      ],
      "release_date": "2010-03-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "seamonkey/thunderbird: crash when indexing certain messages with attachments"
    },
    {
      "cve": "CVE-2010-0169",
      "discovery_date": "2010-03-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "576694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser\u0027s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox/thunderbird/seamonkey: browser chrome defacement via cached XUL stylesheets (MFSA 2010-14)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0169"
        },
        {
          "category": "external",
          "summary": "RHBZ#576694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=576694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0169",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0169"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0169",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0169"
        }
      ],
      "release_date": "2010-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "firefox/thunderbird/seamonkey: browser chrome defacement via cached XUL stylesheets (MFSA 2010-14)"
    },
    {
      "cve": "CVE-2010-0171",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2010-03-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "576696"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox/thunderbird/seamonkey: XSS using addEventListener and setTimeout on a wrapped object (MFSA 2010-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0171"
        },
        {
          "category": "external",
          "summary": "RHBZ#576696",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=576696"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0171",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0171"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0171",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0171"
        }
      ],
      "release_date": "2010-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox/thunderbird/seamonkey: XSS using addEventListener and setTimeout on a wrapped object (MFSA 2010-12)"
    }
  ]
}

cve-2009-0689

Vulnerability from cvelistv5

Published

2009-07-01 12:26

Modified

2024-08-07 04:40

Severity ?

Summary

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

References

▼	URL	Tags
	http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h	x_refsource_CONFIRM
	http://secunia.com/secunia_research/2009-35/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=516862	x_refsource_CONFIRM
	http://securityreason.com/achievement_securityalert/63	third-party-advisory, x_refsource_SREASONRES
	http://www.securityfocus.com/archive/1/507979/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://securityreason.com/achievement_securityalert/78	third-party-advisory, x_refsource_SREASONRES
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://securityreason.com/achievement_securityalert/75	third-party-advisory, x_refsource_SREASONRES
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:330	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/507977/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.apple.com/kb/HT4225	x_refsource_CONFIRM
	http://securityreason.com/achievement_securityalert/73	third-party-advisory, x_refsource_SREASONRES
	http://securityreason.com/achievement_securityalert/72	third-party-advisory, x_refsource_SREASONRES
	http://www.mozilla.org/security/announce/2009/mfsa2009-59.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0094	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2009/3299	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-1601.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/508423/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0312.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37683	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://www.opera.com/support/kb/view/942/	x_refsource_CONFIRM
	http://securityreason.com/achievement_securityalert/69	third-party-advisory, x_refsource_SREASONRES
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://support.apple.com/kb/HT4077	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=516396	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37682	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38066	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/508417/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://rhn.redhat.com/errata/RHSA-2014-0311.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/3297	vdb-entry, x_refsource_VUPEN
	http://securityreason.com/achievement_securityalert/76	third-party-advisory, x_refsource_SREASONRES
	http://secunia.com/advisories/37431	third-party-advisory, x_refsource_SECUNIA
	http://securityreason.com/achievement_securityalert/81	third-party-advisory, x_refsource_SREASONRES
	http://securityreason.com/achievement_securityalert/71	third-party-advisory, x_refsource_SREASONRES
	http://securitytracker.com/id?1022478	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://securityreason.com/achievement_securityalert/77	third-party-advisory, x_refsource_SREASONRES
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/35510	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:40:05.365Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-35/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862"
          },
          {
            "name": "20090625 Multiple Vendors libc/gdtoa printf(3) Array Overrun",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/63"
          },
          {
            "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507979/100/0/threaded"
          },
          {
            "name": "20091211 Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/78"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "20091211 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/75"
          },
          {
            "name": "MDVSA-2009:330",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SR:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
          },
          {
            "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507977/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4225"
          },
          {
            "name": "20091120 Opera 10.01 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/73"
          },
          {
            "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/72"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html"
          },
          {
            "name": "ADV-2010-0094",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0094"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "name": "ADV-2009-3299",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3299"
          },
          {
            "name": "RHSA-2009:1601",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1601.html"
          },
          {
            "name": "20091210 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/508423/100/0/threaded"
          },
          {
            "name": "APPLE-SA-2010-03-29-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
          },
          {
            "name": "[debian-lts-announce] 20181101 [SECURITY] [DLA 1564-1] mono security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "RHSA-2014:0312",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0312.html"
          },
          {
            "name": "37683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37683"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.opera.com/support/kb/view/942/"
          },
          {
            "name": "20091030 Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/69"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4077"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396"
          },
          {
            "name": "oval:org.mitre.oval:def:6528",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528"
          },
          {
            "name": "37682",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37682"
          },
          {
            "name": "oval:org.mitre.oval:def:9541",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541"
          },
          {
            "name": "38066",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38066"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "20091210 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/508417/100/0/threaded"
          },
          {
            "name": "RHSA-2014:0311",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0311.html"
          },
          {
            "name": "ADV-2009-3297",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3297"
          },
          {
            "name": "20091211 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/76"
          },
          {
            "name": "37431",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37431"
          },
          {
            "name": "20100108 MacOS X 10.5/10.6 libc/strtod(3) buffer overflow",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/81"
          },
          {
            "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/71"
          },
          {
            "name": "1022478",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022478"
          },
          {
            "name": "APPLE-SA-2010-06-21-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "20091211 Sunbird 0.9 Array Overrun (code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/77"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          },
          {
            "name": "35510",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35510"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-06-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-02T09:57:01",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-35/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862"
        },
        {
          "name": "20090625 Multiple Vendors libc/gdtoa printf(3) Array Overrun",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/63"
        },
        {
          "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507979/100/0/threaded"
        },
        {
          "name": "20091211 Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/78"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "20091211 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/75"
        },
        {
          "name": "MDVSA-2009:330",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SR:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
        },
        {
          "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507977/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4225"
        },
        {
          "name": "20091120 Opera 10.01 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/73"
        },
        {
          "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/72"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html"
        },
        {
          "name": "ADV-2010-0094",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0094"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "name": "ADV-2009-3299",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3299"
        },
        {
          "name": "RHSA-2009:1601",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1601.html"
        },
        {
          "name": "20091210 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/508423/100/0/threaded"
        },
        {
          "name": "APPLE-SA-2010-03-29-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
        },
        {
          "name": "[debian-lts-announce] 20181101 [SECURITY] [DLA 1564-1] mono security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "RHSA-2014:0312",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0312.html"
        },
        {
          "name": "37683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37683"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.opera.com/support/kb/view/942/"
        },
        {
          "name": "20091030 Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/69"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4077"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396"
        },
        {
          "name": "oval:org.mitre.oval:def:6528",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528"
        },
        {
          "name": "37682",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37682"
        },
        {
          "name": "oval:org.mitre.oval:def:9541",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541"
        },
        {
          "name": "38066",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38066"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "20091210 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/508417/100/0/threaded"
        },
        {
          "name": "RHSA-2014:0311",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0311.html"
        },
        {
          "name": "ADV-2009-3297",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3297"
        },
        {
          "name": "20091211 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/76"
        },
        {
          "name": "37431",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37431"
        },
        {
          "name": "20100108 MacOS X 10.5/10.6 libc/strtod(3) buffer overflow",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/81"
        },
        {
          "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/71"
        },
        {
          "name": "1022478",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022478"
        },
        {
          "name": "APPLE-SA-2010-06-21-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "20091211 Sunbird 0.9 Array Overrun (code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/77"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        },
        {
          "name": "35510",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35510"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0689",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h",
              "refsource": "CONFIRM",
              "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-35/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-35/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862"
            },
            {
              "name": "20090625 Multiple Vendors libc/gdtoa printf(3) Array Overrun",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/63"
            },
            {
              "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507979/100/0/threaded"
            },
            {
              "name": "20091211 Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/78"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "20091211 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/75"
            },
            {
              "name": "MDVSA-2009:330",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330"
            },
            {
              "name": "39001",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39001"
            },
            {
              "name": "SUSE-SR:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
            },
            {
              "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507977/100/0/threaded"
            },
            {
              "name": "http://support.apple.com/kb/HT4225",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4225"
            },
            {
              "name": "20091120 Opera 10.01 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/73"
            },
            {
              "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/72"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html"
            },
            {
              "name": "ADV-2010-0094",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0094"
            },
            {
              "name": "ADV-2010-0648",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0648"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "ADV-2009-3299",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3299"
            },
            {
              "name": "RHSA-2009:1601",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1601.html"
            },
            {
              "name": "20091210 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/508423/100/0/threaded"
            },
            {
              "name": "APPLE-SA-2010-03-29-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
            },
            {
              "name": "[debian-lts-announce] 20181101 [SECURITY] [DLA 1564-1] mono security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "RHSA-2014:0312",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0312.html"
            },
            {
              "name": "37683",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37683"
            },
            {
              "name": "38977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38977"
            },
            {
              "name": "http://www.opera.com/support/kb/view/942/",
              "refsource": "CONFIRM",
              "url": "http://www.opera.com/support/kb/view/942/"
            },
            {
              "name": "20091030 Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/69"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://support.apple.com/kb/HT4077",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4077"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396"
            },
            {
              "name": "oval:org.mitre.oval:def:6528",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528"
            },
            {
              "name": "37682",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37682"
            },
            {
              "name": "oval:org.mitre.oval:def:9541",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541"
            },
            {
              "name": "38066",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38066"
            },
            {
              "name": "USN-915-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-915-1"
            },
            {
              "name": "20091210 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/508417/100/0/threaded"
            },
            {
              "name": "RHSA-2014:0311",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0311.html"
            },
            {
              "name": "ADV-2009-3297",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3297"
            },
            {
              "name": "20091211 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/76"
            },
            {
              "name": "37431",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37431"
            },
            {
              "name": "20100108 MacOS X 10.5/10.6 libc/strtod(3) buffer overflow",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/81"
            },
            {
              "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/71"
            },
            {
              "name": "1022478",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022478"
            },
            {
              "name": "APPLE-SA-2010-06-21-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"
            },
            {
              "name": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c",
              "refsource": "CONFIRM",
              "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "20091211 Sunbird 0.9 Array Overrun (code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/77"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            },
            {
              "name": "35510",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35510"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0689",
    "datePublished": "2009-07-01T12:26:00",
    "dateReserved": "2009-02-22T00:00:00",
    "dateUpdated": "2024-08-07T04:40:05.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0169

Vulnerability from cvelistv5

Published

2010-03-25 20:31

Modified

2024-08-07 00:37

Severity ?

Summary

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=535806	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/38918	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0692	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-14.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.100Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806"
          },
          {
            "name": "38918",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38918"
          },
          {
            "name": "oval:org.mitre.oval:def:11391",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391"
          },
          {
            "name": "ADV-2010-0692",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0692"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html"
          },
          {
            "name": "oval:org.mitre.oval:def:8431",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser\u0027s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806"
        },
        {
          "name": "38918",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38918"
        },
        {
          "name": "oval:org.mitre.oval:def:11391",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391"
        },
        {
          "name": "ADV-2010-0692",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0692"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html"
        },
        {
          "name": "oval:org.mitre.oval:def:8431",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser\u0027s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806"
            },
            {
              "name": "38918",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38918"
            },
            {
              "name": "oval:org.mitre.oval:def:11391",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391"
            },
            {
              "name": "ADV-2010-0692",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0692"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html"
            },
            {
              "name": "oval:org.mitre.oval:def:8431",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0169",
    "datePublished": "2010-03-25T20:31:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.100Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0159

Vulnerability from cvelistv5

Published

2010-02-21 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-895-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=534082	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38847	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2010-0113.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:042	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=530880	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0112.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-01.html	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/56359	vdb-entry, x_refsource_XF
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38770	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=467005	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=528134	x_refsource_CONFIRM
	http://www.debian.org/security/2010/dsa-1999	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=527567	x_refsource_CONFIRM
	http://secunia.com/advisories/38772	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-896-1	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0405	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37242	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=528300	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=501934	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:53.936Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-895-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-895-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9590",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590"
          },
          {
            "name": "38847",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38847"
          },
          {
            "name": "SUSE-SA:2010:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
          },
          {
            "name": "RHSA-2010:0113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
          },
          {
            "name": "MDVSA-2010:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
          },
          {
            "name": "FEDORA-2010-1936",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880"
          },
          {
            "name": "RHSA-2010:0112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html"
          },
          {
            "name": "mozilla-browsereng-code-execution(56359)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359"
          },
          {
            "name": "FEDORA-2010-1932",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
          },
          {
            "name": "38770",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38770"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134"
          },
          {
            "name": "DSA-1999",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1999"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "FEDORA-2010-1727",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567"
          },
          {
            "name": "38772",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38772"
          },
          {
            "name": "USN-896-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-896-1"
          },
          {
            "name": "ADV-2010-0405",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0405"
          },
          {
            "name": "37242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37242"
          },
          {
            "name": "FEDORA-2010-3230",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934"
          },
          {
            "name": "FEDORA-2010-3267",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
          },
          {
            "name": "oval:org.mitre.oval:def:8485",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-895-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-895-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9590",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590"
        },
        {
          "name": "38847",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38847"
        },
        {
          "name": "SUSE-SA:2010:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
        },
        {
          "name": "RHSA-2010:0113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
        },
        {
          "name": "MDVSA-2010:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
        },
        {
          "name": "FEDORA-2010-1936",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880"
        },
        {
          "name": "RHSA-2010:0112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html"
        },
        {
          "name": "mozilla-browsereng-code-execution(56359)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359"
        },
        {
          "name": "FEDORA-2010-1932",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
        },
        {
          "name": "38770",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38770"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134"
        },
        {
          "name": "DSA-1999",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-1999"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "FEDORA-2010-1727",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567"
        },
        {
          "name": "38772",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38772"
        },
        {
          "name": "USN-896-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-896-1"
        },
        {
          "name": "ADV-2010-0405",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0405"
        },
        {
          "name": "37242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37242"
        },
        {
          "name": "FEDORA-2010-3230",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934"
        },
        {
          "name": "FEDORA-2010-3267",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
        },
        {
          "name": "oval:org.mitre.oval:def:8485",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0159",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-895-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-895-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "oval:org.mitre.oval:def:9590",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590"
            },
            {
              "name": "38847",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38847"
            },
            {
              "name": "SUSE-SA:2010:015",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
            },
            {
              "name": "RHSA-2010:0113",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
            },
            {
              "name": "MDVSA-2010:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
            },
            {
              "name": "FEDORA-2010-1936",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880"
            },
            {
              "name": "RHSA-2010:0112",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html"
            },
            {
              "name": "mozilla-browsereng-code-execution(56359)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359"
            },
            {
              "name": "FEDORA-2010-1932",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
            },
            {
              "name": "38770",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38770"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134"
            },
            {
              "name": "DSA-1999",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-1999"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "FEDORA-2010-1727",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567"
            },
            {
              "name": "38772",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38772"
            },
            {
              "name": "USN-896-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-896-1"
            },
            {
              "name": "ADV-2010-0405",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0405"
            },
            {
              "name": "37242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37242"
            },
            {
              "name": "FEDORA-2010-3230",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934"
            },
            {
              "name": "FEDORA-2010-3267",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
            },
            {
              "name": "oval:org.mitre.oval:def:8485",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0159",
    "datePublished": "2010-02-21T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:53.936Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3380

Vulnerability from cvelistv5

Published

2009-10-29 14:00

Modified

2024-08-07 06:22

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=454872	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=508927	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=489925	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=509602	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=497013	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-64.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=509244	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=522030	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=514776	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.811Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030"
          },
          {
            "name": "oval:org.mitre.oval:def:6580",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776"
          },
          {
            "name": "oval:org.mitre.oval:def:9463",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030"
        },
        {
          "name": "oval:org.mitre.oval:def:6580",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776"
        },
        {
          "name": "oval:org.mitre.oval:def:9463",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030"
            },
            {
              "name": "oval:org.mitre.oval:def:6580",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776"
            },
            {
              "name": "oval:org.mitre.oval:def:9463",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3380",
    "datePublished": "2009-10-29T14:00:00",
    "dateReserved": "2009-09-24T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.811Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3979

Vulnerability from cvelistv5

Published

2009-12-17 17:00

Modified

2024-08-07 06:45

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/37704	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=293347	x_refsource_CONFIRM
	http://secunia.com/advisories/37699	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=546694	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=479931	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3547	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37703	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37881	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/54799	vdb-entry, x_refsource_XF
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/37785	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1023333	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-874-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/37813	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html	vendor-advisory, x_refsource_FEDORA
	http://www.ubuntu.com/usn/USN-873-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=516237	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=522374	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/37349	vdb-entry, x_refsource_BID
	https://rhn.redhat.com/errata/RHSA-2009-1674.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=494617	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1956	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=506267	x_refsource_CONFIRM
	http://secunia.com/advisories/37856	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-65.html	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1673.html	vendor-advisory, x_refsource_REDHAT
	http://securitytracker.com/id?1023334	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=515811	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=457514	x_refsource_CONFIRM
	http://www.novell.com/linux/security/advisories/2009_63_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/37361	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:45:50.879Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "37704",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37704"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347"
          },
          {
            "name": "37699",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37699"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931"
          },
          {
            "name": "oval:org.mitre.oval:def:10956",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956"
          },
          {
            "name": "ADV-2009-3547",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3547"
          },
          {
            "name": "37703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37703"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "37881",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37881"
          },
          {
            "name": "mozilla-seamonkey-browser-code-exec(54799)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54799"
          },
          {
            "name": "FEDORA-2009-13362",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html"
          },
          {
            "name": "37785",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37785"
          },
          {
            "name": "1023333",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023333"
          },
          {
            "name": "USN-874-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-874-1"
          },
          {
            "name": "37813",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37813"
          },
          {
            "name": "FEDORA-2009-13333",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html"
          },
          {
            "name": "USN-873-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-873-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374"
          },
          {
            "name": "37349",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/37349"
          },
          {
            "name": "RHSA-2009:1674",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1674.html"
          },
          {
            "name": "FEDORA-2009-13366",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617"
          },
          {
            "name": "DSA-1956",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1956"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267"
          },
          {
            "name": "37856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37856"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html"
          },
          {
            "name": "RHSA-2009:1673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1673.html"
          },
          {
            "name": "1023334",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023334"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514"
          },
          {
            "name": "SUSE-SA:2009:063",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_63_firefox.html"
          },
          {
            "name": "37361",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/37361"
          },
          {
            "name": "oval:org.mitre.oval:def:8487",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-12-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "37704",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37704"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347"
        },
        {
          "name": "37699",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37699"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931"
        },
        {
          "name": "oval:org.mitre.oval:def:10956",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956"
        },
        {
          "name": "ADV-2009-3547",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3547"
        },
        {
          "name": "37703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37703"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "37881",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37881"
        },
        {
          "name": "mozilla-seamonkey-browser-code-exec(54799)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54799"
        },
        {
          "name": "FEDORA-2009-13362",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html"
        },
        {
          "name": "37785",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37785"
        },
        {
          "name": "1023333",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023333"
        },
        {
          "name": "USN-874-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-874-1"
        },
        {
          "name": "37813",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37813"
        },
        {
          "name": "FEDORA-2009-13333",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html"
        },
        {
          "name": "USN-873-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-873-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374"
        },
        {
          "name": "37349",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/37349"
        },
        {
          "name": "RHSA-2009:1674",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1674.html"
        },
        {
          "name": "FEDORA-2009-13366",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617"
        },
        {
          "name": "DSA-1956",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1956"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267"
        },
        {
          "name": "37856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37856"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html"
        },
        {
          "name": "RHSA-2009:1673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1673.html"
        },
        {
          "name": "1023334",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023334"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514"
        },
        {
          "name": "SUSE-SA:2009:063",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_63_firefox.html"
        },
        {
          "name": "37361",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/37361"
        },
        {
          "name": "oval:org.mitre.oval:def:8487",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3979",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "37704",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37704"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347"
            },
            {
              "name": "37699",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37699"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=546694",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931"
            },
            {
              "name": "oval:org.mitre.oval:def:10956",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956"
            },
            {
              "name": "ADV-2009-3547",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3547"
            },
            {
              "name": "37703",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37703"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "37881",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37881"
            },
            {
              "name": "mozilla-seamonkey-browser-code-exec(54799)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54799"
            },
            {
              "name": "FEDORA-2009-13362",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html"
            },
            {
              "name": "37785",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37785"
            },
            {
              "name": "1023333",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023333"
            },
            {
              "name": "USN-874-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-874-1"
            },
            {
              "name": "37813",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37813"
            },
            {
              "name": "FEDORA-2009-13333",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html"
            },
            {
              "name": "USN-873-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-873-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374"
            },
            {
              "name": "37349",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/37349"
            },
            {
              "name": "RHSA-2009:1674",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-1674.html"
            },
            {
              "name": "FEDORA-2009-13366",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617"
            },
            {
              "name": "DSA-1956",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1956"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267"
            },
            {
              "name": "37856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37856"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html"
            },
            {
              "name": "RHSA-2009:1673",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-1673.html"
            },
            {
              "name": "1023334",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023334"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514"
            },
            {
              "name": "SUSE-SA:2009:063",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2009_63_firefox.html"
            },
            {
              "name": "37361",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/37361"
            },
            {
              "name": "oval:org.mitre.oval:def:8487",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3979",
    "datePublished": "2009-12-17T17:00:00",
    "dateReserved": "2009-11-19T00:00:00",
    "dateUpdated": "2024-08-07T06:45:50.879Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3075

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=441714	x_refsource_CONFIRM
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-47.html	x_refsource_CONFIRM
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=505305	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/53158	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:55.420Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=441714"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5717",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "oval:org.mitre.oval:def:11365",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505305"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "name": "mozilla-javascript-engine-code-exec(53158)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53158"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=441714"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5717",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "oval:org.mitre.oval:def:11365",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505305"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "name": "mozilla-javascript-engine-code-exec(53158)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53158"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3075",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:55.420Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2466

Vulnerability from cvelistv5

Published

2009-07-22 18:00

Modified

2024-08-07 05:52

Severity ?

Summary

The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.

References

▼	URL	Tags
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1	vendor-advisory, x_refsource_SUNALERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820	vdb-entry, signature, x_refsource_OVAL
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1	vendor-advisory, x_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36145	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35944	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=493281	x_refsource_CONFIRM
	http://secunia.com/advisories/35943	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-1162.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-34.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=465980	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/35758	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2152	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=454704	x_refsource_CONFIRM
	http://secunia.com/advisories/36005	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2009-1163.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/35947	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=494445	x_refsource_CONFIRM
	http://secunia.com/advisories/35914	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1972	vdb-entry, x_refsource_VUPEN

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:14.831Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "265068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
          },
          {
            "name": "oval:org.mitre.oval:def:9820",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820"
          },
          {
            "name": "1020800",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "FEDORA-2009-7961",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
          },
          {
            "name": "36145",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36145"
          },
          {
            "name": "35944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35944"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=493281"
          },
          {
            "name": "35943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35943"
          },
          {
            "name": "SUSE-SA:2009:039",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
          },
          {
            "name": "RHSA-2009:1162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=465980"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "35758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35758"
          },
          {
            "name": "ADV-2009-2152",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2152"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454704"
          },
          {
            "name": "36005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36005"
          },
          {
            "name": "RHSA-2009:1163",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
          },
          {
            "name": "35947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35947"
          },
          {
            "name": "SUSE-SA:2009:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494445"
          },
          {
            "name": "35914",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35914"
          },
          {
            "name": "ADV-2009-1972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "265068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
        },
        {
          "name": "oval:org.mitre.oval:def:9820",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820"
        },
        {
          "name": "1020800",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "FEDORA-2009-7961",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
        },
        {
          "name": "36145",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36145"
        },
        {
          "name": "35944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35944"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=493281"
        },
        {
          "name": "35943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35943"
        },
        {
          "name": "SUSE-SA:2009:039",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
        },
        {
          "name": "RHSA-2009:1162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=465980"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "35758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35758"
        },
        {
          "name": "ADV-2009-2152",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2152"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454704"
        },
        {
          "name": "36005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36005"
        },
        {
          "name": "RHSA-2009:1163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
        },
        {
          "name": "35947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35947"
        },
        {
          "name": "SUSE-SA:2009:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494445"
        },
        {
          "name": "35914",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35914"
        },
        {
          "name": "ADV-2009-1972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1972"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2466",
    "datePublished": "2009-07-22T18:00:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:14.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3376

Vulnerability from cvelistv5

Published

2009-10-29 14:00

Modified

2024-08-07 06:22

Severity ?

Summary

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=511521	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-62.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.510Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11218",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "oval:org.mitre.oval:def:6541",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11218",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "oval:org.mitre.oval:def:6541",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3376",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "ADV-2010-0648",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0648"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "38977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38977"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html"
            },
            {
              "name": "oval:org.mitre.oval:def:11218",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218"
            },
            {
              "name": "USN-915-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-915-1"
            },
            {
              "name": "oval:org.mitre.oval:def:6541",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3376",
    "datePublished": "2009-10-29T14:00:00",
    "dateReserved": "2009-09-24T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2470

Vulnerability from cvelistv5

Published

2009-08-04 16:13

Modified

2024-08-07 05:52

Severity ?

Summary

Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.

References

▼	URL	Tags
	http://www.vupen.com/english/advisories/2009/2142	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=459524	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1022665	vdb-entry, x_refsource_SECTRACK
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/52252	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/35925	vdb-entry, x_refsource_BID
	https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/36126	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2009/mfsa2009-38.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:14.864Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2009-2142",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2142"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=459524"
          },
          {
            "name": "1022665",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022665"
          },
          {
            "name": "266148",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "firefox-socks5-dos(52252)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52252"
          },
          {
            "name": "35925",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35925"
          },
          {
            "name": "FEDORA-2009-8288",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "36126",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36126"
          },
          {
            "name": "FEDORA-2009-8279",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10197",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-38.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-08-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2009-2142",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2142"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=459524"
        },
        {
          "name": "1022665",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022665"
        },
        {
          "name": "266148",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "firefox-socks5-dos(52252)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52252"
        },
        {
          "name": "35925",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35925"
        },
        {
          "name": "FEDORA-2009-8288",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "36126",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36126"
        },
        {
          "name": "FEDORA-2009-8279",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10197",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-38.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2470",
    "datePublished": "2009-08-04T16:13:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:14.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2463

Vulnerability from cvelistv5

Published

2009-07-22 18:00

Modified

2024-08-07 05:52

Severity ?

Summary

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

References

▼	URL	Tags
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1	vendor-advisory, x_refsource_SUNALERT
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1	vendor-advisory, x_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=492779	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36145	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35944	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35943	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-1162.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-34.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/35758	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2152	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36005	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2009-1163.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/35947	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/35914	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1972	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:14.700Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "265068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
          },
          {
            "name": "1020800",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "oval:org.mitre.oval:def:10369",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=492779"
          },
          {
            "name": "FEDORA-2009-7961",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
          },
          {
            "name": "36145",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36145"
          },
          {
            "name": "35944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35944"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "35943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35943"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "SUSE-SA:2009:039",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
          },
          {
            "name": "RHSA-2009:1162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "35758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35758"
          },
          {
            "name": "ADV-2009-2152",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2152"
          },
          {
            "name": "36005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36005"
          },
          {
            "name": "RHSA-2009:1163",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
          },
          {
            "name": "35947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35947"
          },
          {
            "name": "SUSE-SA:2009:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "35914",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35914"
          },
          {
            "name": "ADV-2009-1972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1972"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "265068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
        },
        {
          "name": "1020800",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "oval:org.mitre.oval:def:10369",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=492779"
        },
        {
          "name": "FEDORA-2009-7961",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
        },
        {
          "name": "36145",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36145"
        },
        {
          "name": "35944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35944"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "35943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35943"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "SUSE-SA:2009:039",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
        },
        {
          "name": "RHSA-2009:1162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "35758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35758"
        },
        {
          "name": "ADV-2009-2152",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2152"
        },
        {
          "name": "36005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36005"
        },
        {
          "name": "RHSA-2009:1163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
        },
        {
          "name": "35947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35947"
        },
        {
          "name": "SUSE-SA:2009:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "35914",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35914"
        },
        {
          "name": "ADV-2009-1972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1972"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2463",
    "datePublished": "2009-07-22T18:00:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:14.700Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3274

Vulnerability from cvelistv5

Published

2009-09-21 19:00

Modified

2024-08-07 06:22

Severity ?

Summary

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx	x_refsource_MISC
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=514823	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://jbrownsec.blogspot.com/2009/09/vamos-updates.html	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36649	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-53.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9641",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641"
          },
          {
            "name": "36649",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36649"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9641",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641"
        },
        {
          "name": "36649",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36649"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3274",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "http://securitytube.net/Zero-Day-Demos-(Firefox-Vulnerability-Discovered)-video.aspx",
              "refsource": "MISC",
              "url": "http://securitytube.net/Zero-Day-Demos-(Firefox-Vulnerability-Discovered)-video.aspx"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html",
              "refsource": "MISC",
              "url": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html"
            },
            {
              "name": "oval:org.mitre.oval:def:9641",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641"
            },
            {
              "name": "36649",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36649"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3274",
    "datePublished": "2009-09-21T19:00:00",
    "dateReserved": "2009-09-21T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3076

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

References

▼	URL	Tags
	http://www.securitytracker.com/id?1022877	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2009/mfsa2009-48.html	x_refsource_CONFIRM
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=326628	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=509413	x_refsource_CONFIRM
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:56.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1022877",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022877"
          },
          {
            "name": "oval:org.mitre.oval:def:9306",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306"
          },
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6140",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-48.html"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=326628"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509413"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1022877",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022877"
        },
        {
          "name": "oval:org.mitre.oval:def:9306",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306"
        },
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6140",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-48.html"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=326628"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509413"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3076",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:56.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2462

Vulnerability from cvelistv5

Published

2009-07-22 18:00

Modified

2024-08-07 05:52

Severity ?

Summary

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.

References

▼	URL	Tags
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1	vendor-advisory, x_refsource_SUNALERT
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1	vendor-advisory, x_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=463350	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=468211	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36145	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35944	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=461861	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35943	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=442227	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-1162.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-34.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=466763	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/35758	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2152	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36005	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=445177	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2009-1163.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=472668	x_refsource_CONFIRM
	http://secunia.com/advisories/35947	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=472950	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=491134	x_refsource_CONFIRM
	http://secunia.com/advisories/35914	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1972	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=413085	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:15.181Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "265068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
          },
          {
            "name": "1020800",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=463350"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=468211"
          },
          {
            "name": "FEDORA-2009-7961",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
          },
          {
            "name": "36145",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36145"
          },
          {
            "name": "35944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35944"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=461861"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "35943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35943"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=442227"
          },
          {
            "name": "SUSE-SA:2009:039",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
          },
          {
            "name": "RHSA-2009:1162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10906",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=466763"
          },
          {
            "name": "35758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35758"
          },
          {
            "name": "ADV-2009-2152",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2152"
          },
          {
            "name": "36005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36005"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=445177"
          },
          {
            "name": "RHSA-2009:1163",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472668"
          },
          {
            "name": "35947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35947"
          },
          {
            "name": "SUSE-SA:2009:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472950"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=491134"
          },
          {
            "name": "35914",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35914"
          },
          {
            "name": "ADV-2009-1972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1972"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=413085"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "265068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
        },
        {
          "name": "1020800",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=463350"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=468211"
        },
        {
          "name": "FEDORA-2009-7961",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
        },
        {
          "name": "36145",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36145"
        },
        {
          "name": "35944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35944"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=461861"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "35943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35943"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=442227"
        },
        {
          "name": "SUSE-SA:2009:039",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
        },
        {
          "name": "RHSA-2009:1162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10906",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=466763"
        },
        {
          "name": "35758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35758"
        },
        {
          "name": "ADV-2009-2152",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2152"
        },
        {
          "name": "36005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36005"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=445177"
        },
        {
          "name": "RHSA-2009:1163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472668"
        },
        {
          "name": "35947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35947"
        },
        {
          "name": "SUSE-SA:2009:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472950"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=491134"
        },
        {
          "name": "35914",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35914"
        },
        {
          "name": "ADV-2009-1972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1972"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=413085"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2462",
    "datePublished": "2009-07-22T18:00:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:15.181Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0163

Vulnerability from cvelistv5

Published

2010-03-22 17:23

Modified

2024-08-07 00:37

Severity ?

Summary

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

References

▼	URL	Tags
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=505221	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/56993	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/38831	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.121Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "oval:org.mitre.oval:def:14259",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "thunderbird-messages-dos(56993)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993"
          },
          {
            "name": "38831",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38831"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "oval:org.mitre.oval:def:10805",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "oval:org.mitre.oval:def:14259",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "thunderbird-messages-dos(56993)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993"
        },
        {
          "name": "38831",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38831"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "oval:org.mitre.oval:def:10805",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0163",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "39001",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39001"
            },
            {
              "name": "ADV-2010-0648",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0648"
            },
            {
              "name": "oval:org.mitre.oval:def:14259",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "38977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38977"
            },
            {
              "name": "thunderbird-messages-dos(56993)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993"
            },
            {
              "name": "38831",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38831"
            },
            {
              "name": "USN-915-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-915-1"
            },
            {
              "name": "oval:org.mitre.oval:def:10805",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0163",
    "datePublished": "2010-03-22T17:23:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.121Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1571

Vulnerability from cvelistv5

Published

2010-02-21 17:00

Modified

2024-08-07 05:20

Severity ?

Summary

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-895-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/secunia_research/2009-45/	x_refsource_MISC
	http://secunia.com/advisories/38847	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2010-0113.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:051	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:042	vendor-advisory, x_refsource_MANDRIVA
	http://www.mozilla.org/security/announce/2010/mfsa2010-03.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2010-0112.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38770	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/56361	vdb-entry, x_refsource_XF
	http://www.debian.org/security/2010/dsa-1999	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38772	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-896-1	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0405	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37242	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615	vdb-entry, signature, x_refsource_OVAL
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=526500	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/archive/1/509585/100/0/threaded	mailing-list, x_refsource_BUGTRAQ

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:20:34.207Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-895-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-895-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-45/"
          },
          {
            "name": "38847",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38847"
          },
          {
            "name": "SUSE-SA:2010:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
          },
          {
            "name": "RHSA-2010:0113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
          },
          {
            "name": "MDVSA-2010:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:051"
          },
          {
            "name": "MDVSA-2010:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html"
          },
          {
            "name": "FEDORA-2010-1936",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
          },
          {
            "name": "RHSA-2010:0112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "FEDORA-2010-1932",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11227",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227"
          },
          {
            "name": "38770",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38770"
          },
          {
            "name": "mozilla-htmlparser-code-exec(56361)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56361"
          },
          {
            "name": "DSA-1999",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1999"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "FEDORA-2010-1727",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
          },
          {
            "name": "38772",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38772"
          },
          {
            "name": "USN-896-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-896-1"
          },
          {
            "name": "ADV-2010-0405",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0405"
          },
          {
            "name": "37242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37242"
          },
          {
            "name": "oval:org.mitre.oval:def:8615",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615"
          },
          {
            "name": "FEDORA-2010-3230",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500"
          },
          {
            "name": "FEDORA-2010-3267",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
          },
          {
            "name": "20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/509585/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "USN-895-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-895-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-45/"
        },
        {
          "name": "38847",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38847"
        },
        {
          "name": "SUSE-SA:2010:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
        },
        {
          "name": "RHSA-2010:0113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
        },
        {
          "name": "MDVSA-2010:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:051"
        },
        {
          "name": "MDVSA-2010:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html"
        },
        {
          "name": "FEDORA-2010-1936",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
        },
        {
          "name": "RHSA-2010:0112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "FEDORA-2010-1932",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11227",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227"
        },
        {
          "name": "38770",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38770"
        },
        {
          "name": "mozilla-htmlparser-code-exec(56361)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56361"
        },
        {
          "name": "DSA-1999",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-1999"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "FEDORA-2010-1727",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
        },
        {
          "name": "38772",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38772"
        },
        {
          "name": "USN-896-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-896-1"
        },
        {
          "name": "ADV-2010-0405",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0405"
        },
        {
          "name": "37242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37242"
        },
        {
          "name": "oval:org.mitre.oval:def:8615",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615"
        },
        {
          "name": "FEDORA-2010-3230",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500"
        },
        {
          "name": "FEDORA-2010-3267",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
        },
        {
          "name": "20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/509585/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-1571",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-895-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-895-1"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-45/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-45/"
            },
            {
              "name": "38847",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38847"
            },
            {
              "name": "SUSE-SA:2010:015",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
            },
            {
              "name": "RHSA-2010:0113",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
            },
            {
              "name": "MDVSA-2010:051",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:051"
            },
            {
              "name": "MDVSA-2010:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html"
            },
            {
              "name": "FEDORA-2010-1936",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
            },
            {
              "name": "RHSA-2010:0112",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "FEDORA-2010-1932",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
            },
            {
              "name": "oval:org.mitre.oval:def:11227",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227"
            },
            {
              "name": "38770",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38770"
            },
            {
              "name": "mozilla-htmlparser-code-exec(56361)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56361"
            },
            {
              "name": "DSA-1999",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-1999"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "FEDORA-2010-1727",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
            },
            {
              "name": "38772",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38772"
            },
            {
              "name": "USN-896-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-896-1"
            },
            {
              "name": "ADV-2010-0405",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0405"
            },
            {
              "name": "37242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37242"
            },
            {
              "name": "oval:org.mitre.oval:def:8615",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615"
            },
            {
              "name": "FEDORA-2010-3230",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500"
            },
            {
              "name": "FEDORA-2010-3267",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
            },
            {
              "name": "20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/509585/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2009-1571",
    "datePublished": "2010-02-21T17:00:00",
    "dateReserved": "2009-05-06T00:00:00",
    "dateUpdated": "2024-08-07T05:20:34.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3077

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-49.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=506871	x_refsource_CONFIRM
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:55.501Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10730",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "oval:org.mitre.oval:def:5606",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-49.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506871"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10730",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "oval:org.mitre.oval:def:5606",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-49.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506871"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3077",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:55.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3384

Vulnerability from cvelistv5

Published

2009-11-13 15:00

Modified

2024-08-07 06:22

Severity ?

Summary

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/36995	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/43068	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2009/3217	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2011/0212	vdb-entry, x_refsource_VUPEN
	http://osvdb.org/59943	vdb-entry, x_refsource_OSVDB
	https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=525788	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/54241	vdb-entry, x_refsource_XF
	http://support.apple.com/kb/HT3949	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362	vdb-entry, signature, x_refsource_OVAL
	http://www.securitytracker.com/id?1023166	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/37397	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT4013	x_refsource_CONFIRM
	http://secunia.com/advisories/37393	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37346	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.862Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "36995",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36995"
          },
          {
            "name": "43068",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43068"
          },
          {
            "name": "APPLE-SA-2009-11-11-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html"
          },
          {
            "name": "ADV-2009-3217",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3217"
          },
          {
            "name": "ADV-2011-0212",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0212"
          },
          {
            "name": "59943",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/59943"
          },
          {
            "name": "FEDORA-2009-11487",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525788"
          },
          {
            "name": "safari-ftp-code-execution(54241)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54241"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3949"
          },
          {
            "name": "APPLE-SA-2010-02-02-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html"
          },
          {
            "name": "SUSE-SR:2011:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
          },
          {
            "name": "FEDORA-2009-11491",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6362",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362"
          },
          {
            "name": "1023166",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1023166"
          },
          {
            "name": "37397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37397"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4013"
          },
          {
            "name": "37393",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37393"
          },
          {
            "name": "37346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37346"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-11-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "36995",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36995"
        },
        {
          "name": "43068",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43068"
        },
        {
          "name": "APPLE-SA-2009-11-11-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html"
        },
        {
          "name": "ADV-2009-3217",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3217"
        },
        {
          "name": "ADV-2011-0212",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0212"
        },
        {
          "name": "59943",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/59943"
        },
        {
          "name": "FEDORA-2009-11487",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525788"
        },
        {
          "name": "safari-ftp-code-execution(54241)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54241"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3949"
        },
        {
          "name": "APPLE-SA-2010-02-02-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html"
        },
        {
          "name": "SUSE-SR:2011:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
        },
        {
          "name": "FEDORA-2009-11491",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6362",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362"
        },
        {
          "name": "1023166",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1023166"
        },
        {
          "name": "37397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37397"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4013"
        },
        {
          "name": "37393",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37393"
        },
        {
          "name": "37346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37346"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3384",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "36995",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/36995"
            },
            {
              "name": "43068",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/43068"
            },
            {
              "name": "APPLE-SA-2009-11-11-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html"
            },
            {
              "name": "ADV-2009-3217",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3217"
            },
            {
              "name": "ADV-2011-0212",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0212"
            },
            {
              "name": "59943",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/59943"
            },
            {
              "name": "FEDORA-2009-11487",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=525788",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525788"
            },
            {
              "name": "safari-ftp-code-execution(54241)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54241"
            },
            {
              "name": "http://support.apple.com/kb/HT3949",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3949"
            },
            {
              "name": "APPLE-SA-2010-02-02-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html"
            },
            {
              "name": "SUSE-SR:2011:002",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
            },
            {
              "name": "FEDORA-2009-11491",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6362",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362"
            },
            {
              "name": "1023166",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1023166"
            },
            {
              "name": "37397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37397"
            },
            {
              "name": "http://support.apple.com/kb/HT4013",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4013"
            },
            {
              "name": "37393",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37393"
            },
            {
              "name": "37346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37346"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3384",
    "datePublished": "2009-11-13T15:00:00",
    "dateReserved": "2009-09-24T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.862Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0171

Vulnerability from cvelistv5

Published

2010-03-25 20:31

Modified

2024-08-07 00:37

Severity ?

Summary

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2010/mfsa2010-12.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/38918	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0692	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=531364	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.029Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html"
          },
          {
            "name": "38918",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38918"
          },
          {
            "name": "oval:org.mitre.oval:def:7743",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743"
          },
          {
            "name": "ADV-2010-0692",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0692"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364"
          },
          {
            "name": "oval:org.mitre.oval:def:10773",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html"
        },
        {
          "name": "38918",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38918"
        },
        {
          "name": "oval:org.mitre.oval:def:7743",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743"
        },
        {
          "name": "ADV-2010-0692",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0692"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364"
        },
        {
          "name": "oval:org.mitre.oval:def:10773",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0171",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html"
            },
            {
              "name": "38918",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38918"
            },
            {
              "name": "oval:org.mitre.oval:def:7743",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743"
            },
            {
              "name": "ADV-2010-0692",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0692"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364"
            },
            {
              "name": "oval:org.mitre.oval:def:10773",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0171",
    "datePublished": "2010-03-25T20:31:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.029Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3072

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=501900	x_refsource_CONFIRM
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-47.html	x_refsource_CONFIRM
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=508074	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=494283	x_refsource_CONFIRM
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:55.562Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501900"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508074"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494283"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "oval:org.mitre.oval:def:10349",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349"
          },
          {
            "name": "oval:org.mitre.oval:def:6315",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501900"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508074"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494283"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "oval:org.mitre.oval:def:10349",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349"
        },
        {
          "name": "oval:org.mitre.oval:def:6315",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3072",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:55.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature