csaf_redhat - rhsa-2010

rhsa-2010_0154

Vulnerability from csaf_redhat

Published

2010-03-17 13:04

Modified

2024-11-05 17:14

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-2462, CVE-2009-2463, CVE-2009-2466, CVE-2009-3072, CVE-2009-3075, CVE-2009-3380, CVE-2009-3979, CVE-2010-0159) A use-after-free flaw was found in Thunderbird. An attacker could use this flaw to crash Thunderbird or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-3077) A heap-based buffer overflow flaw was found in the Thunderbird string to floating point conversion routines. An HTML mail message containing malicious JavaScript could crash Thunderbird or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-0689) A use-after-free flaw was found in Thunderbird. Under low memory conditions, viewing an HTML mail message containing malicious content could result in Thunderbird executing arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-1571) A flaw was found in the way Thunderbird created temporary file names for downloaded files. If a local attacker knows the name of a file Thunderbird is going to download, they can replace the contents of that file with arbitrary contents. (CVE-2009-3274) A flaw was found in the way Thunderbird displayed a right-to-left override character when downloading a file. In these cases, the name displayed in the title bar differed from the name displayed in the dialog body. An attacker could use this flaw to trick a user into downloading a file that has a file name or extension that is different from what the user expected. (CVE-2009-3376) A flaw was found in the way Thunderbird processed SOCKS5 proxy replies. A malicious SOCKS5 server could send a specially-crafted reply that would cause Thunderbird to crash. (CVE-2009-2470) Descriptions in the dialogs when adding and removing PKCS #11 modules were not informative. An attacker able to trick a user into installing a malicious PKCS #11 module could use this flaw to install their own Certificate Authority certificates on a user's machine, making it possible to trick the user into believing they are viewing trusted content or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2009-3076) All Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated thunderbird package that fixes several security issues is now\navailable for Red Hat Enterprise Linux 4.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML mail content.\nAn HTML mail message containing malicious content could cause Thunderbird\nto crash or, potentially, execute arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2009-2462, CVE-2009-2463, CVE-2009-2466,\nCVE-2009-3072, CVE-2009-3075, CVE-2009-3380, CVE-2009-3979, CVE-2010-0159)\n\nA use-after-free flaw was found in Thunderbird. An attacker could use this\nflaw to crash Thunderbird or, potentially, execute arbitrary code with the\nprivileges of the user running Thunderbird. (CVE-2009-3077)\n\nA heap-based buffer overflow flaw was found in the Thunderbird string to\nfloating point conversion routines. An HTML mail message containing\nmalicious JavaScript could crash Thunderbird or, potentially, execute\narbitrary code with the privileges of the user running Thunderbird.\n(CVE-2009-0689)\n\nA use-after-free flaw was found in Thunderbird. Under low memory\nconditions, viewing an HTML mail message containing malicious content could\nresult in Thunderbird executing arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2009-1571)\n\nA flaw was found in the way Thunderbird created temporary file names for\ndownloaded files. If a local attacker knows the name of a file Thunderbird\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the way Thunderbird displayed a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differed from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that is different from what the user expected.\n(CVE-2009-3376)\n\nA flaw was found in the way Thunderbird processed SOCKS5 proxy replies. A\nmalicious SOCKS5 server could send a specially-crafted reply that would\ncause Thunderbird to crash. (CVE-2009-2470)\n\nDescriptions in the dialogs when adding and removing PKCS #11 modules were\nnot informative. An attacker able to trick a user into installing a\nmalicious PKCS #11 module could use this flaw to install their own\nCertificate Authority certificates on a user\u0027s machine, making it possible\nto trick the user into believing they are viewing trusted content or,\npotentially, execute arbitrary code with the privileges of the user running\nThunderbird. (CVE-2009-3076)\n\nAll Thunderbird users should upgrade to this updated package, which\nresolves these issues. All running instances of Thunderbird must be\nrestarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0154",
        "url": "https://access.redhat.com/errata/RHSA-2010:0154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "512128",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512128"
      },
      {
        "category": "external",
        "summary": "512131",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512131"
      },
      {
        "category": "external",
        "summary": "512136",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512136"
      },
      {
        "category": "external",
        "summary": "512145",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512145"
      },
      {
        "category": "external",
        "summary": "521688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
      },
      {
        "category": "external",
        "summary": "521691",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
      },
      {
        "category": "external",
        "summary": "521692",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
      },
      {
        "category": "external",
        "summary": "521693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
      },
      {
        "category": "external",
        "summary": "524815",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=524815"
      },
      {
        "category": "external",
        "summary": "530162",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530162"
      },
      {
        "category": "external",
        "summary": "530168",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530168"
      },
      {
        "category": "external",
        "summary": "530567",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530567"
      },
      {
        "category": "external",
        "summary": "546694",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
      },
      {
        "category": "external",
        "summary": "566047",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566047"
      },
      {
        "category": "external",
        "summary": "566050",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566050"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0154.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-05T17:14:17+00:00",
      "generator": {
        "date": "2024-11-05T17:14:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2010:0154",
      "initial_release_date": "2010-03-17T13:04:00+00:00",
      "revision_history": [
        {
          "date": "2010-03-17T13:04:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-03-17T09:22:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T17:14:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.ia64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.ia64",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.src",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.x86_64",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.i386",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.ppc",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.ppc",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.s390x",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.s390x",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.12-25.el4.s390",
                "product": {
                  "name": "thunderbird-0:1.5.0.12-25.el4.s390",
                  "product_id": "thunderbird-0:1.5.0.12-25.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.12-25.el4?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.12-25.el4?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.src"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-0689",
      "discovery_date": "2009-11-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "539784"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "array index error in dtoa implementation of many products",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-0689"
        },
        {
          "category": "external",
          "summary": "RHBZ#539784",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=539784"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-0689",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-0689"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-0689",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0689"
        }
      ],
      "release_date": "2009-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "array index error in dtoa implementation of many products"
    },
    {
      "cve": "CVE-2009-1571",
      "discovery_date": "2010-02-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "566050"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla incorrectly frees used memory (MFSA 2010-03)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1571"
        },
        {
          "category": "external",
          "summary": "RHBZ#566050",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566050"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1571",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1571"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1571",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1571"
        }
      ],
      "release_date": "2010-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla incorrectly frees used memory (MFSA 2010-03)"
    },
    {
      "cve": "CVE-2009-2462",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512128"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Browser engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2462"
        },
        {
          "category": "external",
          "summary": "RHBZ#512128",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512128"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2462"
        }
      ],
      "release_date": "2009-07-21T23:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Browser engine crashes"
    },
    {
      "cve": "CVE-2009-2463",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512131"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla Base64 decoding crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2463"
        },
        {
          "category": "external",
          "summary": "RHBZ#512131",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512131"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2463",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2463"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2463",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2463"
        }
      ],
      "release_date": "2009-07-21T23:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla Base64 decoding crash"
    },
    {
      "cve": "CVE-2009-2466",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512136"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla JavaScript engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2466"
        },
        {
          "category": "external",
          "summary": "RHBZ#512136",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512136"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2466",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2466"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2466",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2466"
        }
      ],
      "release_date": "2009-07-21T23:56:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla JavaScript engine crashes"
    },
    {
      "cve": "CVE-2009-2470",
      "discovery_date": "2009-07-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "512145"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla data corruption with SOCKS5 reply",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-2470"
        },
        {
          "category": "external",
          "summary": "RHBZ#512145",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=512145"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-2470",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-2470"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-2470",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2470"
        }
      ],
      "release_date": "2009-07-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Mozilla data corruption with SOCKS5 reply"
    },
    {
      "cve": "CVE-2009-3072",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.5.3 3.0.14 browser engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3072"
        },
        {
          "category": "external",
          "summary": "RHBZ#521688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3072"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox 3.5.3 3.0.14 browser engine crashes"
    },
    {
      "cve": "CVE-2009-3075",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521691"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.5.2 3.0.14 JavaScript engine crashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3075"
        },
        {
          "category": "external",
          "summary": "RHBZ#521691",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521691"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3075",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3075"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3075"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox 3.5.2 3.0.14 JavaScript engine crashes"
    },
    {
      "cve": "CVE-2009-3076",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521692"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3076"
        },
        {
          "category": "external",
          "summary": "RHBZ#521692",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521692"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3076",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3076"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3076"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal"
    },
    {
      "cve": "CVE-2009-3077",
      "discovery_date": "2009-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "521693"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3077"
        },
        {
          "category": "external",
          "summary": "RHBZ#521693",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=521693"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3077",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3077"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3077"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability"
    },
    {
      "cve": "CVE-2009-3274",
      "discovery_date": "2009-09-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "524815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox: Predictable /tmp pathname use",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3274"
        },
        {
          "category": "external",
          "summary": "RHBZ#524815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=524815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3274",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3274"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3274",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3274"
        }
      ],
      "release_date": "2009-09-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Firefox: Predictable /tmp pathname use"
    },
    {
      "cve": "CVE-2009-3376",
      "discovery_date": "2009-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "530168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox download filename spoofing with RTL override",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3376"
        },
        {
          "category": "external",
          "summary": "RHBZ#530168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3376",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3376"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3376",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3376"
        }
      ],
      "release_date": "2009-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Firefox download filename spoofing with RTL override"
    },
    {
      "cve": "CVE-2009-3380",
      "discovery_date": "2009-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "530567"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox crashes with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3380"
        },
        {
          "category": "external",
          "summary": "RHBZ#530567",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530567"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3380"
        }
      ],
      "release_date": "2009-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox crashes with evidence of memory corruption"
    },
    {
      "cve": "CVE-2009-3384",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2009-10-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "530164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Firefox integer underflow in FTP directory list parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3384"
        },
        {
          "category": "external",
          "summary": "RHBZ#530164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=530164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3384"
        }
      ],
      "release_date": "2009-10-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Firefox integer underflow in FTP directory list parser"
    },
    {
      "cve": "CVE-2009-3979",
      "discovery_date": "2009-12-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "546694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crash with evidence of memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3979"
        },
        {
          "category": "external",
          "summary": "RHBZ#546694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3979"
        }
      ],
      "release_date": "2009-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crash with evidence of memory corruption"
    },
    {
      "cve": "CVE-2010-0159",
      "discovery_date": "2010-02-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "566047"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla crashes with evidence of memory corruption (MFSA 2010-01)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0159"
        },
        {
          "category": "external",
          "summary": "RHBZ#566047",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=566047"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0159",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0159"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0159",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0159"
        }
      ],
      "release_date": "2010-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla crashes with evidence of memory corruption (MFSA 2010-01)"
    },
    {
      "cve": "CVE-2010-0163",
      "discovery_date": "2010-03-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "576391"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "seamonkey/thunderbird: crash when indexing certain messages with attachments",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0163"
        },
        {
          "category": "external",
          "summary": "RHBZ#576391",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=576391"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0163"
        }
      ],
      "release_date": "2010-03-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "seamonkey/thunderbird: crash when indexing certain messages with attachments"
    },
    {
      "cve": "CVE-2010-0169",
      "discovery_date": "2010-03-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "576694"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser\u0027s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox/thunderbird/seamonkey: browser chrome defacement via cached XUL stylesheets (MFSA 2010-14)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0169"
        },
        {
          "category": "external",
          "summary": "RHBZ#576694",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=576694"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0169",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0169"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0169",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0169"
        }
      ],
      "release_date": "2010-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "firefox/thunderbird/seamonkey: browser chrome defacement via cached XUL stylesheets (MFSA 2010-14)"
    },
    {
      "cve": "CVE-2010-0171",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2010-03-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "576696"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox/thunderbird/seamonkey: XSS using addEventListener and setTimeout on a wrapped object (MFSA 2010-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-0:1.5.0.12-25.el4.src",
          "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
          "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-0:1.5.0.12-25.el4.src",
          "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-0:1.5.0.12-25.el4.src",
          "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0171"
        },
        {
          "category": "external",
          "summary": "RHBZ#576696",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=576696"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0171",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0171"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0171",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0171"
        }
      ],
      "release_date": "2010-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-17T13:04:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0154"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "4AS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-0:1.5.0.12-25.el4.src",
            "4AS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.src",
            "4Desktop:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-0:1.5.0.12-25.el4.src",
            "4ES:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-0:1.5.0.12-25.el4.src",
            "4WS:thunderbird-0:1.5.0.12-25.el4.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.12-25.el4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox/thunderbird/seamonkey: XSS using addEventListener and setTimeout on a wrapped object (MFSA 2010-12)"
    }
  ]
}

cve-2009-2470

Vulnerability from cvelistv5

Published

2009-08-04 16:13

Modified

2024-08-07 05:52

Severity ?

Summary

Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.

References

▼	URL	Tags
	http://www.vupen.com/english/advisories/2009/2142	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=459524	x_refsource_CONFIRM
	http://www.securitytracker.com/id?1022665	vdb-entry, x_refsource_SECTRACK
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/52252	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/35925	vdb-entry, x_refsource_BID
	https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/36126	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2009/mfsa2009-38.html	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:14.864Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2009-2142",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2142"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=459524"
          },
          {
            "name": "1022665",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022665"
          },
          {
            "name": "266148",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "firefox-socks5-dos(52252)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52252"
          },
          {
            "name": "35925",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35925"
          },
          {
            "name": "FEDORA-2009-8288",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "36126",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36126"
          },
          {
            "name": "FEDORA-2009-8279",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10197",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-38.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-08-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "ADV-2009-2142",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2142"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=459524"
        },
        {
          "name": "1022665",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022665"
        },
        {
          "name": "266148",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "firefox-socks5-dos(52252)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52252"
        },
        {
          "name": "35925",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35925"
        },
        {
          "name": "FEDORA-2009-8288",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "36126",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36126"
        },
        {
          "name": "FEDORA-2009-8279",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10197",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10197"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-38.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2470",
    "datePublished": "2009-08-04T16:13:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:14.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3380

Vulnerability from cvelistv5

Published

2009-10-29 14:00

Modified

2024-08-07 06:22

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=454872	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=508927	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=489925	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=509602	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=497013	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-64.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=509244	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=522030	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=514776	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.811Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030"
          },
          {
            "name": "oval:org.mitre.oval:def:6580",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776"
          },
          {
            "name": "oval:org.mitre.oval:def:9463",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030"
        },
        {
          "name": "oval:org.mitre.oval:def:6580",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776"
        },
        {
          "name": "oval:org.mitre.oval:def:9463",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454872"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508927"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=489925"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509602"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=497013"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-64.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509244"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522030"
            },
            {
              "name": "oval:org.mitre.oval:def:6580",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514776"
            },
            {
              "name": "oval:org.mitre.oval:def:9463",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3380",
    "datePublished": "2009-10-29T14:00:00",
    "dateReserved": "2009-09-24T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.811Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3274

Vulnerability from cvelistv5

Published

2009-09-21 19:00

Modified

2024-08-07 06:22

Severity ?

Summary

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx	x_refsource_MISC
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=514823	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://jbrownsec.blogspot.com/2009/09/vamos-updates.html	x_refsource_MISC
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36649	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-53.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9641",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641"
          },
          {
            "name": "36649",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36649"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://securitytube.net/Zero-Day-Demos-%28Firefox-Vulnerability-Discovered%29-video.aspx"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9641",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641"
        },
        {
          "name": "36649",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36649"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3274",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "http://securitytube.net/Zero-Day-Demos-(Firefox-Vulnerability-Discovered)-video.aspx",
              "refsource": "MISC",
              "url": "http://securitytube.net/Zero-Day-Demos-(Firefox-Vulnerability-Discovered)-video.aspx"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=514823"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html",
              "refsource": "MISC",
              "url": "http://jbrownsec.blogspot.com/2009/09/vamos-updates.html"
            },
            {
              "name": "oval:org.mitre.oval:def:9641",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9641"
            },
            {
              "name": "36649",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36649"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-53.html"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3274",
    "datePublished": "2009-09-21T19:00:00",
    "dateReserved": "2009-09-21T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3376

Vulnerability from cvelistv5

Published

2009-10-29 14:00

Modified

2024-08-07 06:22

Severity ?

Summary

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.

References

▼	URL	Tags
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	https://bugzilla.mozilla.org/show_bug.cgi?id=511521	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-62.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.510Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11218",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "oval:org.mitre.oval:def:6541",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-10-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11218",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "oval:org.mitre.oval:def:6541",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3376",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "ADV-2010-0648",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0648"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=511521"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "38977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38977"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-62.html"
            },
            {
              "name": "oval:org.mitre.oval:def:11218",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218"
            },
            {
              "name": "USN-915-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-915-1"
            },
            {
              "name": "oval:org.mitre.oval:def:6541",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3376",
    "datePublished": "2009-10-29T14:00:00",
    "dateReserved": "2009-09-24T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0163

Vulnerability from cvelistv5

Published

2010-03-22 17:23

Modified

2024-08-07 00:37

Severity ?

Summary

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

References

▼	URL	Tags
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2010-0499.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=505221	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/1556	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/56993	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/38831	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.121Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "oval:org.mitre.oval:def:14259",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259"
          },
          {
            "name": "RHSA-2010:0499",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221"
          },
          {
            "name": "ADV-2010-1556",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1556"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "thunderbird-messages-dos(56993)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993"
          },
          {
            "name": "38831",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38831"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "oval:org.mitre.oval:def:10805",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "oval:org.mitre.oval:def:14259",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259"
        },
        {
          "name": "RHSA-2010:0499",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221"
        },
        {
          "name": "ADV-2010-1556",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1556"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "thunderbird-messages-dos(56993)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993"
        },
        {
          "name": "38831",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38831"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "oval:org.mitre.oval:def:10805",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0163",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "39001",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39001"
            },
            {
              "name": "ADV-2010-0648",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0648"
            },
            {
              "name": "oval:org.mitre.oval:def:14259",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259"
            },
            {
              "name": "RHSA-2010:0499",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0499.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505221"
            },
            {
              "name": "ADV-2010-1556",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1556"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "38977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38977"
            },
            {
              "name": "thunderbird-messages-dos(56993)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993"
            },
            {
              "name": "38831",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38831"
            },
            {
              "name": "USN-915-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-915-1"
            },
            {
              "name": "oval:org.mitre.oval:def:10805",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0163",
    "datePublished": "2010-03-22T17:23:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.121Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2463

Vulnerability from cvelistv5

Published

2009-07-22 18:00

Modified

2024-08-07 05:52

Severity ?

Summary

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.

References

▼	URL	Tags
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1	vendor-advisory, x_refsource_SUNALERT
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1	vendor-advisory, x_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=492779	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36145	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35944	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35943	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-1162.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-34.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/35758	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2152	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36005	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2009-1163.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/35947	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/35914	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1972	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:14.700Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "265068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
          },
          {
            "name": "1020800",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "oval:org.mitre.oval:def:10369",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=492779"
          },
          {
            "name": "FEDORA-2009-7961",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
          },
          {
            "name": "36145",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36145"
          },
          {
            "name": "35944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35944"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "35943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35943"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "SUSE-SA:2009:039",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
          },
          {
            "name": "RHSA-2009:1162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "35758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35758"
          },
          {
            "name": "ADV-2009-2152",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2152"
          },
          {
            "name": "36005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36005"
          },
          {
            "name": "RHSA-2009:1163",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
          },
          {
            "name": "35947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35947"
          },
          {
            "name": "SUSE-SA:2009:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "35914",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35914"
          },
          {
            "name": "ADV-2009-1972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1972"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "265068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
        },
        {
          "name": "1020800",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "oval:org.mitre.oval:def:10369",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=492779"
        },
        {
          "name": "FEDORA-2009-7961",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
        },
        {
          "name": "36145",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36145"
        },
        {
          "name": "35944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35944"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "35943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35943"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "SUSE-SA:2009:039",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
        },
        {
          "name": "RHSA-2009:1162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "35758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35758"
        },
        {
          "name": "ADV-2009-2152",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2152"
        },
        {
          "name": "36005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36005"
        },
        {
          "name": "RHSA-2009:1163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
        },
        {
          "name": "35947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35947"
        },
        {
          "name": "SUSE-SA:2009:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "35914",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35914"
        },
        {
          "name": "ADV-2009-1972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1972"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2463",
    "datePublished": "2009-07-22T18:00:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:14.700Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3077

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-49.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=506871	x_refsource_CONFIRM
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:55.501Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10730",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "oval:org.mitre.oval:def:5606",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-49.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506871"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a \"dangling pointer vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10730",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10730"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "oval:org.mitre.oval:def:5606",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5606"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-49.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506871"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3077",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:55.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3076

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

References

▼	URL	Tags
	http://www.securitytracker.com/id?1022877	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306	vdb-entry, signature, x_refsource_OVAL
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2009/mfsa2009-48.html	x_refsource_CONFIRM
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=326628	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=509413	x_refsource_CONFIRM
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:56.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1022877",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022877"
          },
          {
            "name": "oval:org.mitre.oval:def:9306",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306"
          },
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6140",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-48.html"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=326628"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509413"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "1022877",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022877"
        },
        {
          "name": "oval:org.mitre.oval:def:9306",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306"
        },
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6140",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-48.html"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=326628"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=509413"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3076",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:56.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0171

Vulnerability from cvelistv5

Published

2010-03-25 20:31

Modified

2024-08-07 00:37

Severity ?

Summary

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.

References

▼	URL	Tags
	http://www.mozilla.org/security/announce/2010/mfsa2010-12.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/38918	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0692	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=531364	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773	vdb-entry, signature, x_refsource_OVAL

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.029Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html"
          },
          {
            "name": "38918",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38918"
          },
          {
            "name": "oval:org.mitre.oval:def:7743",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743"
          },
          {
            "name": "ADV-2010-0692",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0692"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364"
          },
          {
            "name": "oval:org.mitre.oval:def:10773",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html"
        },
        {
          "name": "38918",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38918"
        },
        {
          "name": "oval:org.mitre.oval:def:7743",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743"
        },
        {
          "name": "ADV-2010-0692",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0692"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364"
        },
        {
          "name": "oval:org.mitre.oval:def:10773",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0171",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html"
            },
            {
              "name": "38918",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38918"
            },
            {
              "name": "oval:org.mitre.oval:def:7743",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743"
            },
            {
              "name": "ADV-2010-0692",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0692"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=531364"
            },
            {
              "name": "oval:org.mitre.oval:def:10773",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0171",
    "datePublished": "2010-03-25T20:31:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.029Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3384

Vulnerability from cvelistv5

Published

2009-11-13 15:00

Modified

2024-08-07 06:22

Severity ?

Summary

Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/36995	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/43068	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2009/3217	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2011/0212	vdb-entry, x_refsource_VUPEN
	http://osvdb.org/59943	vdb-entry, x_refsource_OSVDB
	https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=525788	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/54241	vdb-entry, x_refsource_XF
	http://support.apple.com/kb/HT3949	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362	vdb-entry, signature, x_refsource_OVAL
	http://www.securitytracker.com/id?1023166	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/37397	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT4013	x_refsource_CONFIRM
	http://secunia.com/advisories/37393	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37346	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:22:24.862Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "36995",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36995"
          },
          {
            "name": "43068",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43068"
          },
          {
            "name": "APPLE-SA-2009-11-11-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html"
          },
          {
            "name": "ADV-2009-3217",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3217"
          },
          {
            "name": "ADV-2011-0212",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0212"
          },
          {
            "name": "59943",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/59943"
          },
          {
            "name": "FEDORA-2009-11487",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525788"
          },
          {
            "name": "safari-ftp-code-execution(54241)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54241"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3949"
          },
          {
            "name": "APPLE-SA-2010-02-02-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html"
          },
          {
            "name": "SUSE-SR:2011:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
          },
          {
            "name": "FEDORA-2009-11491",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6362",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362"
          },
          {
            "name": "1023166",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1023166"
          },
          {
            "name": "37397",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37397"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4013"
          },
          {
            "name": "37393",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37393"
          },
          {
            "name": "37346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37346"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-11-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "36995",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36995"
        },
        {
          "name": "43068",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/43068"
        },
        {
          "name": "APPLE-SA-2009-11-11-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html"
        },
        {
          "name": "ADV-2009-3217",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3217"
        },
        {
          "name": "ADV-2011-0212",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0212"
        },
        {
          "name": "59943",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/59943"
        },
        {
          "name": "FEDORA-2009-11487",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525788"
        },
        {
          "name": "safari-ftp-code-execution(54241)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54241"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3949"
        },
        {
          "name": "APPLE-SA-2010-02-02-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html"
        },
        {
          "name": "SUSE-SR:2011:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
        },
        {
          "name": "FEDORA-2009-11491",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6362",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362"
        },
        {
          "name": "1023166",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1023166"
        },
        {
          "name": "37397",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37397"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4013"
        },
        {
          "name": "37393",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37393"
        },
        {
          "name": "37346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37346"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3384",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "36995",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/36995"
            },
            {
              "name": "43068",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/43068"
            },
            {
              "name": "APPLE-SA-2009-11-11-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html"
            },
            {
              "name": "ADV-2009-3217",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3217"
            },
            {
              "name": "ADV-2011-0212",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0212"
            },
            {
              "name": "59943",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/59943"
            },
            {
              "name": "FEDORA-2009-11487",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=525788",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525788"
            },
            {
              "name": "safari-ftp-code-execution(54241)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54241"
            },
            {
              "name": "http://support.apple.com/kb/HT3949",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3949"
            },
            {
              "name": "APPLE-SA-2010-02-02-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html"
            },
            {
              "name": "SUSE-SR:2011:002",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
            },
            {
              "name": "FEDORA-2009-11491",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6362",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362"
            },
            {
              "name": "1023166",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1023166"
            },
            {
              "name": "37397",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37397"
            },
            {
              "name": "http://support.apple.com/kb/HT4013",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4013"
            },
            {
              "name": "37393",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37393"
            },
            {
              "name": "37346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37346"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3384",
    "datePublished": "2009-11-13T15:00:00",
    "dateReserved": "2009-09-24T00:00:00",
    "dateUpdated": "2024-08-07T06:22:24.862Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0169

Vulnerability from cvelistv5

Published

2010-03-25 20:31

Modified

2024-08-07 00:37

Severity ?

Summary

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=535806	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/38918	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2010/0692	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-14.html	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431	vdb-entry, signature, x_refsource_OVAL

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.100Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806"
          },
          {
            "name": "38918",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38918"
          },
          {
            "name": "oval:org.mitre.oval:def:11391",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391"
          },
          {
            "name": "ADV-2010-0692",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0692"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html"
          },
          {
            "name": "oval:org.mitre.oval:def:8431",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-03-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser\u0027s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806"
        },
        {
          "name": "38918",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38918"
        },
        {
          "name": "oval:org.mitre.oval:def:11391",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391"
        },
        {
          "name": "ADV-2010-0692",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0692"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html"
        },
        {
          "name": "oval:org.mitre.oval:def:8431",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser\u0027s font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=535806"
            },
            {
              "name": "38918",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38918"
            },
            {
              "name": "oval:org.mitre.oval:def:11391",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391"
            },
            {
              "name": "ADV-2010-0692",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0692"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html"
            },
            {
              "name": "oval:org.mitre.oval:def:8431",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0169",
    "datePublished": "2010-03-25T20:31:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.100Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3979

Vulnerability from cvelistv5

Published

2009-12-17 17:00

Modified

2024-08-07 06:45

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	http://secunia.com/advisories/37704	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=293347	x_refsource_CONFIRM
	http://secunia.com/advisories/37699	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=546694	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=479931	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2009/3547	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37703	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37881	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/54799	vdb-entry, x_refsource_XF
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/37785	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1023333	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-874-1	vendor-advisory, x_refsource_UBUNTU
	http://secunia.com/advisories/37813	third-party-advisory, x_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html	vendor-advisory, x_refsource_FEDORA
	http://www.ubuntu.com/usn/USN-873-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=516237	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=522374	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/37349	vdb-entry, x_refsource_BID
	https://rhn.redhat.com/errata/RHSA-2009-1674.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=494617	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1956	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=506267	x_refsource_CONFIRM
	http://secunia.com/advisories/37856	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-65.html	x_refsource_CONFIRM
	https://rhn.redhat.com/errata/RHSA-2009-1673.html	vendor-advisory, x_refsource_REDHAT
	http://securitytracker.com/id?1023334	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=515811	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=457514	x_refsource_CONFIRM
	http://www.novell.com/linux/security/advisories/2009_63_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/37361	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487	vdb-entry, signature, x_refsource_OVAL

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:45:50.879Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "37704",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37704"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347"
          },
          {
            "name": "37699",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37699"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931"
          },
          {
            "name": "oval:org.mitre.oval:def:10956",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956"
          },
          {
            "name": "ADV-2009-3547",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3547"
          },
          {
            "name": "37703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37703"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "37881",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37881"
          },
          {
            "name": "mozilla-seamonkey-browser-code-exec(54799)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54799"
          },
          {
            "name": "FEDORA-2009-13362",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html"
          },
          {
            "name": "37785",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37785"
          },
          {
            "name": "1023333",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023333"
          },
          {
            "name": "USN-874-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-874-1"
          },
          {
            "name": "37813",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37813"
          },
          {
            "name": "FEDORA-2009-13333",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html"
          },
          {
            "name": "USN-873-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-873-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374"
          },
          {
            "name": "37349",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/37349"
          },
          {
            "name": "RHSA-2009:1674",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1674.html"
          },
          {
            "name": "FEDORA-2009-13366",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617"
          },
          {
            "name": "DSA-1956",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1956"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267"
          },
          {
            "name": "37856",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37856"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html"
          },
          {
            "name": "RHSA-2009:1673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-1673.html"
          },
          {
            "name": "1023334",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023334"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514"
          },
          {
            "name": "SUSE-SA:2009:063",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_63_firefox.html"
          },
          {
            "name": "37361",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/37361"
          },
          {
            "name": "oval:org.mitre.oval:def:8487",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-12-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "37704",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37704"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347"
        },
        {
          "name": "37699",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37699"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931"
        },
        {
          "name": "oval:org.mitre.oval:def:10956",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956"
        },
        {
          "name": "ADV-2009-3547",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3547"
        },
        {
          "name": "37703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37703"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "37881",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37881"
        },
        {
          "name": "mozilla-seamonkey-browser-code-exec(54799)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54799"
        },
        {
          "name": "FEDORA-2009-13362",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html"
        },
        {
          "name": "37785",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37785"
        },
        {
          "name": "1023333",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023333"
        },
        {
          "name": "USN-874-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-874-1"
        },
        {
          "name": "37813",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37813"
        },
        {
          "name": "FEDORA-2009-13333",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html"
        },
        {
          "name": "USN-873-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-873-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374"
        },
        {
          "name": "37349",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/37349"
        },
        {
          "name": "RHSA-2009:1674",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1674.html"
        },
        {
          "name": "FEDORA-2009-13366",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617"
        },
        {
          "name": "DSA-1956",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1956"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267"
        },
        {
          "name": "37856",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37856"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html"
        },
        {
          "name": "RHSA-2009:1673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-1673.html"
        },
        {
          "name": "1023334",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023334"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514"
        },
        {
          "name": "SUSE-SA:2009:063",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_63_firefox.html"
        },
        {
          "name": "37361",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/37361"
        },
        {
          "name": "oval:org.mitre.oval:def:8487",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3979",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "37704",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37704"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=293347"
            },
            {
              "name": "37699",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37699"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=546694",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=546694"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=479931"
            },
            {
              "name": "oval:org.mitre.oval:def:10956",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10956"
            },
            {
              "name": "ADV-2009-3547",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3547"
            },
            {
              "name": "37703",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37703"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "37881",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37881"
            },
            {
              "name": "mozilla-seamonkey-browser-code-exec(54799)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54799"
            },
            {
              "name": "FEDORA-2009-13362",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html"
            },
            {
              "name": "37785",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37785"
            },
            {
              "name": "1023333",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023333"
            },
            {
              "name": "USN-874-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-874-1"
            },
            {
              "name": "37813",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37813"
            },
            {
              "name": "FEDORA-2009-13333",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html"
            },
            {
              "name": "USN-873-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-873-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516237"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=522374"
            },
            {
              "name": "37349",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/37349"
            },
            {
              "name": "RHSA-2009:1674",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-1674.html"
            },
            {
              "name": "FEDORA-2009-13366",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494617"
            },
            {
              "name": "DSA-1956",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2009/dsa-1956"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=506267"
            },
            {
              "name": "37856",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37856"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-65.html"
            },
            {
              "name": "RHSA-2009:1673",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-1673.html"
            },
            {
              "name": "1023334",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023334"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=515811"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=457514"
            },
            {
              "name": "SUSE-SA:2009:063",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2009_63_firefox.html"
            },
            {
              "name": "37361",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/37361"
            },
            {
              "name": "oval:org.mitre.oval:def:8487",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8487"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3979",
    "datePublished": "2009-12-17T17:00:00",
    "dateReserved": "2009-11-19T00:00:00",
    "dateUpdated": "2024-08-07T06:45:50.879Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3072

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=501900	x_refsource_CONFIRM
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-47.html	x_refsource_CONFIRM
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=508074	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=494283	x_refsource_CONFIRM
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349	vdb-entry, signature, x_refsource_OVAL
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315	vdb-entry, signature, x_refsource_OVAL
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:55.562Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501900"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508074"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494283"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "oval:org.mitre.oval:def:10349",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349"
          },
          {
            "name": "oval:org.mitre.oval:def:6315",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501900"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=508074"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494283"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "oval:org.mitre.oval:def:10349",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10349"
        },
        {
          "name": "oval:org.mitre.oval:def:6315",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3072",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:55.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-0689

Vulnerability from cvelistv5

Published

2009-07-01 12:26

Modified

2024-08-07 04:40

Severity ?

Summary

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

References

▼	URL	Tags
	http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h	x_refsource_CONFIRM
	http://secunia.com/secunia_research/2009-35/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=516862	x_refsource_CONFIRM
	http://securityreason.com/achievement_securityalert/63	third-party-advisory, x_refsource_SREASONRES
	http://www.securityfocus.com/archive/1/507979/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://securityreason.com/achievement_securityalert/78	third-party-advisory, x_refsource_SREASONRES
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://securityreason.com/achievement_securityalert/75	third-party-advisory, x_refsource_SREASONRES
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:330	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/507977/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.apple.com/kb/HT4225	x_refsource_CONFIRM
	http://securityreason.com/achievement_securityalert/73	third-party-advisory, x_refsource_SREASONRES
	http://securityreason.com/achievement_securityalert/72	third-party-advisory, x_refsource_SREASONRES
	http://www.mozilla.org/security/announce/2009/mfsa2009-59.html	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0094	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1	vendor-advisory, x_refsource_SUNALERT
	http://www.vupen.com/english/advisories/2009/3299	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2009-1601.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/508423/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2014-0312.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/37683	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://www.opera.com/support/kb/view/942/	x_refsource_CONFIRM
	http://securityreason.com/achievement_securityalert/69	third-party-advisory, x_refsource_SREASONRES
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://support.apple.com/kb/HT4077	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=516396	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/37682	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38066	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/508417/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://rhn.redhat.com/errata/RHSA-2014-0311.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2009/3297	vdb-entry, x_refsource_VUPEN
	http://securityreason.com/achievement_securityalert/76	third-party-advisory, x_refsource_SREASONRES
	http://secunia.com/advisories/37431	third-party-advisory, x_refsource_SECUNIA
	http://securityreason.com/achievement_securityalert/81	third-party-advisory, x_refsource_SREASONRES
	http://securityreason.com/achievement_securityalert/71	third-party-advisory, x_refsource_SREASONRES
	http://securitytracker.com/id?1022478	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/3334	vdb-entry, x_refsource_VUPEN
	http://securityreason.com/achievement_securityalert/77	third-party-advisory, x_refsource_SREASONRES
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:294	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/35510	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T04:40:05.365Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-35/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862"
          },
          {
            "name": "20090625 Multiple Vendors libc/gdtoa printf(3) Array Overrun",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/63"
          },
          {
            "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507979/100/0/threaded"
          },
          {
            "name": "20091211 Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/78"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "20091211 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/75"
          },
          {
            "name": "MDVSA-2009:330",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SR:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
          },
          {
            "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/507977/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4225"
          },
          {
            "name": "20091120 Opera 10.01 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/73"
          },
          {
            "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/72"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html"
          },
          {
            "name": "ADV-2010-0094",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0094"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "272909",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
          },
          {
            "name": "ADV-2009-3299",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3299"
          },
          {
            "name": "RHSA-2009:1601",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1601.html"
          },
          {
            "name": "20091210 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/508423/100/0/threaded"
          },
          {
            "name": "APPLE-SA-2010-03-29-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
          },
          {
            "name": "[debian-lts-announce] 20181101 [SECURITY] [DLA 1564-1] mono security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "RHSA-2014:0312",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0312.html"
          },
          {
            "name": "37683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37683"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.opera.com/support/kb/view/942/"
          },
          {
            "name": "20091030 Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/69"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4077"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396"
          },
          {
            "name": "oval:org.mitre.oval:def:6528",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528"
          },
          {
            "name": "37682",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37682"
          },
          {
            "name": "oval:org.mitre.oval:def:9541",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541"
          },
          {
            "name": "38066",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38066"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "name": "20091210 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/508417/100/0/threaded"
          },
          {
            "name": "RHSA-2014:0311",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0311.html"
          },
          {
            "name": "ADV-2009-3297",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3297"
          },
          {
            "name": "20091211 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/76"
          },
          {
            "name": "37431",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37431"
          },
          {
            "name": "20100108 MacOS X 10.5/10.6 libc/strtod(3) buffer overflow",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/81"
          },
          {
            "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/71"
          },
          {
            "name": "1022478",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1022478"
          },
          {
            "name": "APPLE-SA-2010-06-21-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c"
          },
          {
            "name": "ADV-2009-3334",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/3334"
          },
          {
            "name": "20091211 Sunbird 0.9 Array Overrun (code execution)",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/77"
          },
          {
            "name": "MDVSA-2009:294",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
          },
          {
            "name": "35510",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35510"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-06-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-02T09:57:01",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-35/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862"
        },
        {
          "name": "20090625 Multiple Vendors libc/gdtoa printf(3) Array Overrun",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/63"
        },
        {
          "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507979/100/0/threaded"
        },
        {
          "name": "20091211 Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/78"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "20091211 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/75"
        },
        {
          "name": "MDVSA-2009:330",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SR:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
        },
        {
          "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/507977/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4225"
        },
        {
          "name": "20091120 Opera 10.01 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/73"
        },
        {
          "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/72"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html"
        },
        {
          "name": "ADV-2010-0094",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0094"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "272909",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
        },
        {
          "name": "ADV-2009-3299",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3299"
        },
        {
          "name": "RHSA-2009:1601",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1601.html"
        },
        {
          "name": "20091210 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/508423/100/0/threaded"
        },
        {
          "name": "APPLE-SA-2010-03-29-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
        },
        {
          "name": "[debian-lts-announce] 20181101 [SECURITY] [DLA 1564-1] mono security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "RHSA-2014:0312",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0312.html"
        },
        {
          "name": "37683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37683"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.opera.com/support/kb/view/942/"
        },
        {
          "name": "20091030 Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/69"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4077"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396"
        },
        {
          "name": "oval:org.mitre.oval:def:6528",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528"
        },
        {
          "name": "37682",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37682"
        },
        {
          "name": "oval:org.mitre.oval:def:9541",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541"
        },
        {
          "name": "38066",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38066"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "name": "20091210 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/508417/100/0/threaded"
        },
        {
          "name": "RHSA-2014:0311",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0311.html"
        },
        {
          "name": "ADV-2009-3297",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3297"
        },
        {
          "name": "20091211 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/76"
        },
        {
          "name": "37431",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37431"
        },
        {
          "name": "20100108 MacOS X 10.5/10.6 libc/strtod(3) buffer overflow",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/81"
        },
        {
          "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/71"
        },
        {
          "name": "1022478",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1022478"
        },
        {
          "name": "APPLE-SA-2010-06-21-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c"
        },
        {
          "name": "ADV-2009-3334",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/3334"
        },
        {
          "name": "20091211 Sunbird 0.9 Array Overrun (code execution)",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/77"
        },
        {
          "name": "MDVSA-2009:294",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
        },
        {
          "name": "35510",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35510"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2009-0689",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h",
              "refsource": "CONFIRM",
              "url": "http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-35/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-35/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516862"
            },
            {
              "name": "20090625 Multiple Vendors libc/gdtoa printf(3) Array Overrun",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/63"
            },
            {
              "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507979/100/0/threaded"
            },
            {
              "name": "20091211 Thunderbird 2.0.0.23 (lib) Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/78"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "20091211 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/75"
            },
            {
              "name": "MDVSA-2009:330",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:330"
            },
            {
              "name": "39001",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39001"
            },
            {
              "name": "SUSE-SR:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html"
            },
            {
              "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/507977/100/0/threaded"
            },
            {
              "name": "http://support.apple.com/kb/HT4225",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4225"
            },
            {
              "name": "20091120 Opera 10.01 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/73"
            },
            {
              "name": "20091120 K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/72"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-59.html"
            },
            {
              "name": "ADV-2010-0094",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0094"
            },
            {
              "name": "ADV-2010-0648",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0648"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "272909",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"
            },
            {
              "name": "ADV-2009-3299",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3299"
            },
            {
              "name": "RHSA-2009:1601",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1601.html"
            },
            {
              "name": "20091210 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/508423/100/0/threaded"
            },
            {
              "name": "APPLE-SA-2010-03-29-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
            },
            {
              "name": "[debian-lts-announce] 20181101 [SECURITY] [DLA 1564-1] mono security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "RHSA-2014:0312",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0312.html"
            },
            {
              "name": "37683",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37683"
            },
            {
              "name": "38977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38977"
            },
            {
              "name": "http://www.opera.com/support/kb/view/942/",
              "refsource": "CONFIRM",
              "url": "http://www.opera.com/support/kb/view/942/"
            },
            {
              "name": "20091030 Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/69"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "http://support.apple.com/kb/HT4077",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4077"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=516396"
            },
            {
              "name": "oval:org.mitre.oval:def:6528",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528"
            },
            {
              "name": "37682",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37682"
            },
            {
              "name": "oval:org.mitre.oval:def:9541",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541"
            },
            {
              "name": "38066",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38066"
            },
            {
              "name": "USN-915-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-915-1"
            },
            {
              "name": "20091210 Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/508417/100/0/threaded"
            },
            {
              "name": "RHSA-2014:0311",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0311.html"
            },
            {
              "name": "ADV-2009-3297",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3297"
            },
            {
              "name": "20091211 Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/76"
            },
            {
              "name": "37431",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37431"
            },
            {
              "name": "20100108 MacOS X 10.5/10.6 libc/strtod(3) buffer overflow",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/81"
            },
            {
              "name": "20091120 SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/71"
            },
            {
              "name": "1022478",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1022478"
            },
            {
              "name": "APPLE-SA-2010-06-21-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"
            },
            {
              "name": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c",
              "refsource": "CONFIRM",
              "url": "http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c"
            },
            {
              "name": "ADV-2009-3334",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/3334"
            },
            {
              "name": "20091211 Sunbird 0.9 Array Overrun (code execution)",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/77"
            },
            {
              "name": "MDVSA-2009:294",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"
            },
            {
              "name": "35510",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35510"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2009-0689",
    "datePublished": "2009-07-01T12:26:00",
    "dateReserved": "2009-02-22T00:00:00",
    "dateUpdated": "2024-08-07T04:40:05.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-3075

Vulnerability from cvelistv5

Published

2009-09-10 21:00

Modified

2024-08-07 06:14

Severity ?

Summary

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.

References

▼	URL	Tags
	http://www.debian.org/security/2009/dsa-1885	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/36343	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/39001	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2009_48_firefox.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2009-1430.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0648	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=441714	x_refsource_CONFIRM
	http://secunia.com/advisories/36692	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36670	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36671	third-party-advisory, x_refsource_SECUNIA
	http://www.mozilla.org/security/announce/2009/mfsa2009-47.html	x_refsource_CONFIRM
	http://secunia.com/advisories/38977	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36669	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=505305	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2009-1432.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/53158	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/37098	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-915-1	vendor-advisory, x_refsource_UBUNTU
	http://www.mozilla.org/security/announce/2010/mfsa2010-07.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2009-1431.html	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:14:55.420Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1885",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2009/dsa-1885"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "36343",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/36343"
          },
          {
            "name": "39001",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39001"
          },
          {
            "name": "SUSE-SA:2009:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
          },
          {
            "name": "RHSA-2009:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
          },
          {
            "name": "ADV-2010-0648",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0648"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=441714"
          },
          {
            "name": "36692",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36692"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5717",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717"
          },
          {
            "name": "36670",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36670"
          },
          {
            "name": "36671",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36671"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
          },
          {
            "name": "38977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38977"
          },
          {
            "name": "36669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36669"
          },
          {
            "name": "oval:org.mitre.oval:def:11365",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505305"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "RHSA-2009:1432",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
          },
          {
            "name": "mozilla-javascript-engine-code-exec(53158)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53158"
          },
          {
            "name": "37098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37098"
          },
          {
            "name": "USN-915-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-915-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
          },
          {
            "name": "RHSA-2009:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-1885",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2009/dsa-1885"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "36343",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/36343"
        },
        {
          "name": "39001",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39001"
        },
        {
          "name": "SUSE-SA:2009:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2009_48_firefox.html"
        },
        {
          "name": "RHSA-2009:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1430.html"
        },
        {
          "name": "ADV-2010-0648",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0648"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=441714"
        },
        {
          "name": "36692",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36692"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5717",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5717"
        },
        {
          "name": "36670",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36670"
        },
        {
          "name": "36671",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36671"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-47.html"
        },
        {
          "name": "38977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38977"
        },
        {
          "name": "36669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36669"
        },
        {
          "name": "oval:org.mitre.oval:def:11365",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11365"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=505305"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "RHSA-2009:1432",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1432.html"
        },
        {
          "name": "mozilla-javascript-engine-code-exec(53158)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53158"
        },
        {
          "name": "37098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37098"
        },
        {
          "name": "USN-915-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-915-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html"
        },
        {
          "name": "RHSA-2009:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-1431.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-3075",
    "datePublished": "2009-09-10T21:00:00",
    "dateReserved": "2009-09-04T00:00:00",
    "dateUpdated": "2024-08-07T06:14:55.420Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2466

Vulnerability from cvelistv5

Published

2009-07-22 18:00

Modified

2024-08-07 05:52

Severity ?

Summary

The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.

References

▼	URL	Tags
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1	vendor-advisory, x_refsource_SUNALERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820	vdb-entry, signature, x_refsource_OVAL
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1	vendor-advisory, x_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36145	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35944	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=493281	x_refsource_CONFIRM
	http://secunia.com/advisories/35943	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-1162.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-34.html	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=465980	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/35758	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2152	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=454704	x_refsource_CONFIRM
	http://secunia.com/advisories/36005	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2009-1163.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/35947	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=494445	x_refsource_CONFIRM
	http://secunia.com/advisories/35914	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1972	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:14.831Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "265068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
          },
          {
            "name": "oval:org.mitre.oval:def:9820",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820"
          },
          {
            "name": "1020800",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "FEDORA-2009-7961",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
          },
          {
            "name": "36145",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36145"
          },
          {
            "name": "35944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35944"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=493281"
          },
          {
            "name": "35943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35943"
          },
          {
            "name": "SUSE-SA:2009:039",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
          },
          {
            "name": "RHSA-2009:1162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=465980"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "35758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35758"
          },
          {
            "name": "ADV-2009-2152",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2152"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454704"
          },
          {
            "name": "36005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36005"
          },
          {
            "name": "RHSA-2009:1163",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
          },
          {
            "name": "35947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35947"
          },
          {
            "name": "SUSE-SA:2009:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494445"
          },
          {
            "name": "35914",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35914"
          },
          {
            "name": "ADV-2009-1972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1972"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "265068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
        },
        {
          "name": "oval:org.mitre.oval:def:9820",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820"
        },
        {
          "name": "1020800",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "FEDORA-2009-7961",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
        },
        {
          "name": "36145",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36145"
        },
        {
          "name": "35944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35944"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=493281"
        },
        {
          "name": "35943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35943"
        },
        {
          "name": "SUSE-SA:2009:039",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
        },
        {
          "name": "RHSA-2009:1162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=465980"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "35758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35758"
        },
        {
          "name": "ADV-2009-2152",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2152"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=454704"
        },
        {
          "name": "36005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36005"
        },
        {
          "name": "RHSA-2009:1163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
        },
        {
          "name": "35947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35947"
        },
        {
          "name": "SUSE-SA:2009:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=494445"
        },
        {
          "name": "35914",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35914"
        },
        {
          "name": "ADV-2009-1972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1972"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2466",
    "datePublished": "2009-07-22T18:00:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:14.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-2462

Vulnerability from cvelistv5

Published

2009-07-22 18:00

Modified

2024-08-07 05:52

Severity ?

Summary

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.

References

▼	URL	Tags
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1	vendor-advisory, x_refsource_SUNALERT
	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1	vendor-advisory, x_refsource_SUNALERT
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=463350	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=468211	x_refsource_CONFIRM
	https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/36145	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35944	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=461861	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35943	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=442227	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2009-1162.html	vendor-advisory, x_refsource_REDHAT
	http://www.mozilla.org/security/announce/2009/mfsa2009-34.html	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906	vdb-entry, signature, x_refsource_OVAL
	https://bugzilla.mozilla.org/show_bug.cgi?id=466763	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/35758	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2009/2152	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36005	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=445177	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2009-1163.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=472668	x_refsource_CONFIRM
	http://secunia.com/advisories/35947	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.mozilla.org/show_bug.cgi?id=472950	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=491134	x_refsource_CONFIRM
	http://secunia.com/advisories/35914	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/1972	vdb-entry, x_refsource_VUPEN
	https://bugzilla.mozilla.org/show_bug.cgi?id=413085	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:52:15.181Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "265068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
          },
          {
            "name": "1020800",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=463350"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=468211"
          },
          {
            "name": "FEDORA-2009-7961",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
          },
          {
            "name": "36145",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36145"
          },
          {
            "name": "35944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35944"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=461861"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "35943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35943"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=442227"
          },
          {
            "name": "SUSE-SA:2009:039",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
          },
          {
            "name": "RHSA-2009:1162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10906",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=466763"
          },
          {
            "name": "35758",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35758"
          },
          {
            "name": "ADV-2009-2152",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2152"
          },
          {
            "name": "36005",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36005"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=445177"
          },
          {
            "name": "RHSA-2009:1163",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472668"
          },
          {
            "name": "35947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35947"
          },
          {
            "name": "SUSE-SA:2009:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472950"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=491134"
          },
          {
            "name": "35914",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35914"
          },
          {
            "name": "ADV-2009-1972",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1972"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=413085"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "265068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1"
        },
        {
          "name": "1020800",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=463350"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=468211"
        },
        {
          "name": "FEDORA-2009-7961",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html"
        },
        {
          "name": "36145",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36145"
        },
        {
          "name": "35944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35944"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=461861"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "35943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35943"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=442227"
        },
        {
          "name": "SUSE-SA:2009:039",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html"
        },
        {
          "name": "RHSA-2009:1162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1162.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2009/mfsa2009-34.html"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10906",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=466763"
        },
        {
          "name": "35758",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35758"
        },
        {
          "name": "ADV-2009-2152",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2152"
        },
        {
          "name": "36005",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36005"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=445177"
        },
        {
          "name": "RHSA-2009:1163",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2009-1163.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472668"
        },
        {
          "name": "35947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35947"
        },
        {
          "name": "SUSE-SA:2009:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=472950"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=491134"
        },
        {
          "name": "35914",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35914"
        },
        {
          "name": "ADV-2009-1972",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1972"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=413085"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2009-2462",
    "datePublished": "2009-07-22T18:00:00",
    "dateReserved": "2009-07-15T00:00:00",
    "dateUpdated": "2024-08-07T05:52:15.181Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2010-0159

Vulnerability from cvelistv5

Published

2010-02-21 17:00

Modified

2024-08-07 00:37

Severity ?

Summary

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-895-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=534082	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38847	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2010-0113.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:042	vendor-advisory, x_refsource_MANDRIVA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=530880	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2010-0112.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://www.mozilla.org/security/announce/2010/mfsa2010-01.html	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/56359	vdb-entry, x_refsource_XF
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38770	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.mozilla.org/show_bug.cgi?id=467005	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=528134	x_refsource_CONFIRM
	http://www.debian.org/security/2010/dsa-1999	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=527567	x_refsource_CONFIRM
	http://secunia.com/advisories/38772	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-896-1	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0405	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37242	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=528300	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=501934	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485	vdb-entry, signature, x_refsource_OVAL

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:53.936Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-895-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-895-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9590",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590"
          },
          {
            "name": "38847",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38847"
          },
          {
            "name": "SUSE-SA:2010:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
          },
          {
            "name": "RHSA-2010:0113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
          },
          {
            "name": "MDVSA-2010:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
          },
          {
            "name": "FEDORA-2010-1936",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880"
          },
          {
            "name": "RHSA-2010:0112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html"
          },
          {
            "name": "mozilla-browsereng-code-execution(56359)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359"
          },
          {
            "name": "FEDORA-2010-1932",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
          },
          {
            "name": "38770",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38770"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134"
          },
          {
            "name": "DSA-1999",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1999"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "FEDORA-2010-1727",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567"
          },
          {
            "name": "38772",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38772"
          },
          {
            "name": "USN-896-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-896-1"
          },
          {
            "name": "ADV-2010-0405",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0405"
          },
          {
            "name": "37242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37242"
          },
          {
            "name": "FEDORA-2010-3230",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934"
          },
          {
            "name": "FEDORA-2010-3267",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
          },
          {
            "name": "oval:org.mitre.oval:def:8485",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-895-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-895-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9590",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590"
        },
        {
          "name": "38847",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38847"
        },
        {
          "name": "SUSE-SA:2010:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
        },
        {
          "name": "RHSA-2010:0113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
        },
        {
          "name": "MDVSA-2010:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
        },
        {
          "name": "FEDORA-2010-1936",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880"
        },
        {
          "name": "RHSA-2010:0112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html"
        },
        {
          "name": "mozilla-browsereng-code-execution(56359)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359"
        },
        {
          "name": "FEDORA-2010-1932",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
        },
        {
          "name": "38770",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38770"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134"
        },
        {
          "name": "DSA-1999",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-1999"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "FEDORA-2010-1727",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567"
        },
        {
          "name": "38772",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38772"
        },
        {
          "name": "USN-896-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-896-1"
        },
        {
          "name": "ADV-2010-0405",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0405"
        },
        {
          "name": "37242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37242"
        },
        {
          "name": "FEDORA-2010-3230",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934"
        },
        {
          "name": "FEDORA-2010-3267",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
        },
        {
          "name": "oval:org.mitre.oval:def:8485",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0159",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-895-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-895-1"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=534082"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "oval:org.mitre.oval:def:9590",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590"
            },
            {
              "name": "38847",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38847"
            },
            {
              "name": "SUSE-SA:2010:015",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
            },
            {
              "name": "RHSA-2010:0113",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
            },
            {
              "name": "MDVSA-2010:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
            },
            {
              "name": "FEDORA-2010-1936",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=530880"
            },
            {
              "name": "RHSA-2010:0112",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html"
            },
            {
              "name": "mozilla-browsereng-code-execution(56359)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359"
            },
            {
              "name": "FEDORA-2010-1932",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
            },
            {
              "name": "38770",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38770"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=467005"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528134"
            },
            {
              "name": "DSA-1999",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-1999"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "FEDORA-2010-1727",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=527567"
            },
            {
              "name": "38772",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38772"
            },
            {
              "name": "USN-896-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-896-1"
            },
            {
              "name": "ADV-2010-0405",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0405"
            },
            {
              "name": "37242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37242"
            },
            {
              "name": "FEDORA-2010-3230",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=528300"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=501934"
            },
            {
              "name": "FEDORA-2010-3267",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
            },
            {
              "name": "oval:org.mitre.oval:def:8485",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0159",
    "datePublished": "2010-02-21T17:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:53.936Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2009-1571

Vulnerability from cvelistv5

Published

2010-02-21 17:00

Modified

2024-08-07 05:20

Severity ?

Summary

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-895-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2010-0153.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/secunia_research/2009-45/	x_refsource_MISC
	http://secunia.com/advisories/38847	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2010-0113.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:051	vendor-advisory, x_refsource_MANDRIVA
	http://www.mandriva.com/security/advisories?name=MDVSA-2010:042	vendor-advisory, x_refsource_MANDRIVA
	http://www.mozilla.org/security/announce/2010/mfsa2010-03.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2010-0112.html	vendor-advisory, x_refsource_REDHAT
	http://www.vupen.com/english/advisories/2010/0650	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html	vendor-advisory, x_refsource_FEDORA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38770	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/56361	vdb-entry, x_refsource_XF
	http://www.debian.org/security/2010/dsa-1999	vendor-advisory, x_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2010-0154.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/38772	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-896-1	vendor-advisory, x_refsource_UBUNTU
	http://www.vupen.com/english/advisories/2010/0405	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/37242	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615	vdb-entry, signature, x_refsource_OVAL
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.mozilla.org/show_bug.cgi?id=526500	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/archive/1/509585/100/0/threaded	mailing-list, x_refsource_BUGTRAQ

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:20:34.207Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-895-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-895-1"
          },
          {
            "name": "RHSA-2010:0153",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/secunia_research/2009-45/"
          },
          {
            "name": "38847",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38847"
          },
          {
            "name": "SUSE-SA:2010:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
          },
          {
            "name": "RHSA-2010:0113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
          },
          {
            "name": "MDVSA-2010:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:051"
          },
          {
            "name": "MDVSA-2010:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html"
          },
          {
            "name": "FEDORA-2010-1936",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
          },
          {
            "name": "RHSA-2010:0112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
          },
          {
            "name": "ADV-2010-0650",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0650"
          },
          {
            "name": "FEDORA-2010-1932",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11227",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227"
          },
          {
            "name": "38770",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38770"
          },
          {
            "name": "mozilla-htmlparser-code-exec(56361)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56361"
          },
          {
            "name": "DSA-1999",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1999"
          },
          {
            "name": "RHSA-2010:0154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
          },
          {
            "name": "FEDORA-2010-1727",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
          },
          {
            "name": "38772",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38772"
          },
          {
            "name": "USN-896-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-896-1"
          },
          {
            "name": "ADV-2010-0405",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0405"
          },
          {
            "name": "37242",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37242"
          },
          {
            "name": "oval:org.mitre.oval:def:8615",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615"
          },
          {
            "name": "FEDORA-2010-3230",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500"
          },
          {
            "name": "FEDORA-2010-3267",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
          },
          {
            "name": "20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/509585/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-02-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
        "shortName": "flexera"
      },
      "references": [
        {
          "name": "USN-895-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-895-1"
        },
        {
          "name": "RHSA-2010:0153",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/secunia_research/2009-45/"
        },
        {
          "name": "38847",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38847"
        },
        {
          "name": "SUSE-SA:2010:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
        },
        {
          "name": "RHSA-2010:0113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
        },
        {
          "name": "MDVSA-2010:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:051"
        },
        {
          "name": "MDVSA-2010:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html"
        },
        {
          "name": "FEDORA-2010-1936",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
        },
        {
          "name": "RHSA-2010:0112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
        },
        {
          "name": "ADV-2010-0650",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0650"
        },
        {
          "name": "FEDORA-2010-1932",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11227",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227"
        },
        {
          "name": "38770",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38770"
        },
        {
          "name": "mozilla-htmlparser-code-exec(56361)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56361"
        },
        {
          "name": "DSA-1999",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-1999"
        },
        {
          "name": "RHSA-2010:0154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
        },
        {
          "name": "FEDORA-2010-1727",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
        },
        {
          "name": "38772",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38772"
        },
        {
          "name": "USN-896-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-896-1"
        },
        {
          "name": "ADV-2010-0405",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0405"
        },
        {
          "name": "37242",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37242"
        },
        {
          "name": "oval:org.mitre.oval:def:8615",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615"
        },
        {
          "name": "FEDORA-2010-3230",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500"
        },
        {
          "name": "FEDORA-2010-3267",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
        },
        {
          "name": "20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/509585/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "PSIRT-CNA@flexerasoftware.com",
          "ID": "CVE-2009-1571",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-895-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-895-1"
            },
            {
              "name": "RHSA-2010:0153",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0153.html"
            },
            {
              "name": "http://secunia.com/secunia_research/2009-45/",
              "refsource": "MISC",
              "url": "http://secunia.com/secunia_research/2009-45/"
            },
            {
              "name": "38847",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38847"
            },
            {
              "name": "SUSE-SA:2010:015",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html"
            },
            {
              "name": "RHSA-2010:0113",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0113.html"
            },
            {
              "name": "MDVSA-2010:051",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:051"
            },
            {
              "name": "MDVSA-2010:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042"
            },
            {
              "name": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html",
              "refsource": "CONFIRM",
              "url": "http://www.mozilla.org/security/announce/2010/mfsa2010-03.html"
            },
            {
              "name": "FEDORA-2010-1936",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html"
            },
            {
              "name": "RHSA-2010:0112",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0112.html"
            },
            {
              "name": "ADV-2010-0650",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0650"
            },
            {
              "name": "FEDORA-2010-1932",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html"
            },
            {
              "name": "oval:org.mitre.oval:def:11227",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227"
            },
            {
              "name": "38770",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38770"
            },
            {
              "name": "mozilla-htmlparser-code-exec(56361)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56361"
            },
            {
              "name": "DSA-1999",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-1999"
            },
            {
              "name": "RHSA-2010:0154",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2010-0154.html"
            },
            {
              "name": "FEDORA-2010-1727",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html"
            },
            {
              "name": "38772",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38772"
            },
            {
              "name": "USN-896-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-896-1"
            },
            {
              "name": "ADV-2010-0405",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0405"
            },
            {
              "name": "37242",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37242"
            },
            {
              "name": "oval:org.mitre.oval:def:8615",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615"
            },
            {
              "name": "FEDORA-2010-3230",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=526500"
            },
            {
              "name": "FEDORA-2010-3267",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html"
            },
            {
              "name": "20100218 Secunia Research: Mozilla Firefox Memory Corruption Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/509585/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab",
    "assignerShortName": "flexera",
    "cveId": "CVE-2009-1571",
    "datePublished": "2010-02-21T17:00:00",
    "dateReserved": "2009-05-06T00:00:00",
    "dateUpdated": "2024-08-07T05:20:34.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags