Home > Vulnerability Database > CVE-2009-1571

Mend.io Vulnerability Database

CVE-2009-1571

Date: February 21, 2010

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

Severity Score

9.8

Related Resources (32)

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-1571

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:051

Url: http://www.vupen.com/english/advisories/2010/0650

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html

Url: http://secunia.com/advisories/37242

Url: http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/56361

Url: http://secunia.com/advisories/38772

Url: http://www.redhat.com/support/errata/RHSA-2010-0112.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-1571

Url: http://secunia.com/secunia_research/2009-45/

Url: https://access.redhat.com/security/cve/CVE-2009-1571

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227

Url: http://www.ubuntu.com/usn/USN-895-1

Url: http://www.redhat.com/support/errata/RHSA-2010-0153.html

Url: http://www.ubuntu.com/usn/USN-896-1

Url: http://www.mozilla.org/security/announce/2010/mfsa2010-03.html

Url: http://secunia.com/advisories/38847

Url: http://www.redhat.com/support/errata/RHSA-2010-0113.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:042

Url: http://www.debian.org/security/2010/dsa-1999

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html

Url: http://www.vupen.com/english/advisories/2010/0405

Url: http://www.securityfocus.com/archive/1/509585/100/0/threaded

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615

Url: http://secunia.com/advisories/38770

Url: http://www.redhat.com/support/errata/RHSA-2010-0154.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=526500

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html

Url: https://www.mend.io/vulnerability-database/CVE-2009-1571

Severity Score

9.8

Weakness Type (CWE)

Code Injection

CWE-94

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-1571

Date: February 21, 2010

Severity Score

Related Resources (32)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?