CVE-2009-3373
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-3373
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mozilla Firefox 的libpr0n GIF解析器堆溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mozilla Firefox，中文名为火狐，是由Mozilla基金会与开源团体共同开发的网页浏览器。 Mozilla Firefox 的libpr0n GIF存在解析器堆溢出漏洞。由于libpr0n GIF解析器在处理GIF颜色映射时存在错误，攻击者可以借助一个特制的GIF文件触发堆缓冲区溢出，导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-3373
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-3373
请登录查看更多情报信息。
- http://www.mozilla.org/security/announce/2009/mfsa2009-56.htmlx_refsource_CONFIRM
- https://bugzilla.mozilla.org/show_bug.cgi?id=511689x_refsource_CONFIRM
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1vendor-advisoryx_refsource_SUNALERT
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2009-3373
Same Patch Batch · n/a · 2009-10-29 · 18 CVEs total
| CVE-2009-3379 | Mozilla Firefox libvorbis库多个远程内存破坏漏洞 | |
| CVE-2009-3640 | Linux kernel 输入验证错误漏洞 | |
| CVE-2009-3638 | Linux kernel 数字错误漏洞 | |
| CVE-2009-3627 | HTML-Parser无效HTML实体解析拒绝服务漏洞 | |
| CVE-2009-3626 | Perl 拒绝服务漏洞 | |
| CVE-2009-3383 | Mozilla Firefox JavaScript引擎多个远程内存破坏漏洞 | |
| CVE-2009-3382 | Mozilla Firefox浏览器引擎layout/base/nsCSSFrameConstructor.cpp 文件拒绝服务攻击漏洞 | |
| CVE-2009-3381 | Mozilla Firefox浏览器引擎多个远程内存破坏漏洞 | |
| CVE-2009-3380 | Mozilla Firefox 浏览器引擎中多个远程内存破坏漏洞 | |
| CVE-2009-3370 | Mozilla Firefox 表单历史信息泄露漏洞 | |
| CVE-2009-3378 | Mozilla Firefox liboggplay库oggplay_data_handle_theora_frame函数远程内存破坏漏洞 | |
| CVE-2009-3377 | Mozilla Firefox liboggz库远程内存破坏漏洞 | |
| CVE-2009-3376 | Mozilla Firefox和SeaMonkey 下载文件名欺诈漏洞 | |
| CVE-2009-3375 | Mozilla Firefox 'document.getSelect' Cross Domain 信息泄露漏洞 | |
| CVE-2009-3374 | Mozilla Firefox的 XPCOM Utility Chrome 权限提升漏洞 | |
| CVE-2009-3372 | Mozilla Firefox和SeaMonkey Proxy Auto-Configuration(PAC)文件远程代码执行漏洞 | |
| CVE-2009-3371 | Mozilla Firefox JavaScript Web-Workers 远程代码执行漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2009-3373
No comments yet