CVE-2009-3373

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 16%

from disclosure to weapon0 days

Published on NVDOct 29

1st PoCOct 27

exploitation probability

16%top 4% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33313

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=511689 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548 http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 http://www.mozilla.org/security/announce/2009/mfsa2009-56.html http://www.vupen.com/english/advisories/2009/3334