Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3370 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=511615 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-52.html - https://oval.cisecurity.org/re
assetkey=1-26-272909-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-52.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6455 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10836 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3371 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464 - http://www.mozilla.org/security/announce/2009/mfsa2009-54.html - https://bugzilla.
/oval%3Aorg.mitre.oval%3Adef%3A6464 - http://www.mozilla.org/security/announce/2009/mfsa2009-54.html - https://bugzilla.mozilla.org/show_bug.cgi?id=514554 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3372 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10977 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=500644 - http://www.mozilla.org/security/announce/2009
tkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=500644 - http://www.mozilla.org/security/announce/2009/mfsa2009-55.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6347 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3373 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-56.html - https://bugzilla.mozilla.org/s
assetkey=1-26-272909-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-56.html - https://bugzilla.mozilla.org/show_bug.cgi?id=511689 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3374 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definitio
Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9789 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=505988 - http://www.mozilla.org/security/announce/2009/mfsa2009-57.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6565 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3375 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10440 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://oval.cisecurity.org/repository/search/
440 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5935 - https://bugzilla.mozilla.org/show_bug.cgi?id=503226 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mozilla.org/security/announce/2009/mfsa2009-61.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3376 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://www.vupen.com/english/advisories/2010/0648 - http
s: - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://www.vupen.com/english/advisories/2010/0648 - http://www.vupen.com/english/advisories/2010/0650 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=511521 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://secunia.com/advisories/38977 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://www.mozilla.org/security/announce/2009/mfsa2009-62.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11218 - http://www.ubuntu.com/usn/USN-915-1 - https://oval.cisecurity.org/repository
ition/oval%3Aorg.mitre.oval%3Adef%3A11218 - http://www.ubuntu.com/usn/USN-915-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6541 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3377 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=512327 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html - https://oval.c
how_bug.cgi?id=512327 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375 - http://www.mozilla.org/security/announce/2009/mfsa2009-63.html - https://bugzilla.mozilla.org/show_bug.cgi?id=515376 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3378 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/searc
crafted .ogg video file. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443 - http://www.mozilla.org/security/announce/2009/mfsa2009-63.html - https://bugzilla.mozilla.org/show_bug.cgi?id=500311 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3379 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors. NOTE: this might overlap CVE-2009-2663. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=507167 - http://secunia.com/advisories/37340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 - https://bugzill
es/37340 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 - https://bugzilla.mozilla.org/show_bug.cgi?id=500254 - http://secunia.com/advisories/37306 - https://bugzilla.mozilla.org/show_bug.cgi?id=501279 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - http://www.redhat.com/support/errata/RHSA-2009-1561.html - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html - https://bugzilla.mozilla.org/show_bug.cgi?id=499512 - h
m/archives/fedora-package-announce/2009-November/msg00369.html - https://bugzilla.mozilla.org/show_bug.cgi?id=499512 - http://www.ubuntu.com/usn/USN-861-1 - http://www.mozilla.org/security/announce/2009/mfsa2009-63.html - https://bugzilla.mozilla.org/show_bug.cgi?id=515889 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3380 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://www.vupen.com/english/advisories/2010/0650 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.
com/english/advisories/2010/0650 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=454872 - https://bugzilla.mozilla.org/show_bug.cgi?id=508927 - https://bugzilla.mozilla.org/show_bug.cgi?id=489925 - https://bugzilla.mozilla.org/show_bug.cgi?id=509602 - https://bugzilla.mozilla.org/show_bug.cgi?id=497013 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://www.mozilla.org/security/announce/2009/mfsa2009-64.html - https://bugzilla.mozilla.org/show_bug.cgi?id=509244 - https://bugzilla.mozilla.org/show_bug.cgi?id=522030 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580 - h
show_bug.cgi?id=522030 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6580 - https://bugzilla.mozilla.org/show_bug.cgi?id=514776 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9463 - http://www.vupen.com/english/advisories/2009/3334 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
CVE ID: CVE-2009-3381 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495 - https://bugzilla.mozilla.org/show_bug.cgi?id=502168 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - http
//bugzilla.mozilla.org/show_bug.cgi?id=502168 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=503196 - https://bugzilla.mozilla.org/show_bug.cgi?id=516709 - http://www.mozilla.org/security/announce/2009/mfsa2009-64.html - https://bugzilla.mozilla.org/show_bug.cgi?id=508057 - https://bugzilla.mozilla.org/show_bug.cgi?id=513394 - http://www.vupen.com/english/advisories/2009/3334
CVE ID: CVE-2009-3382 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5581 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 -
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A5581 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11219 - https://bugzilla.mozilla.org/show_bug.cgi?id=514960 - http://www.mozilla.org/security/announce/2009/mfsa2009-64.html - http://www.vupen.com/english/advisories/2009/3334
CVE ID: CVE-2009-3383 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:22:24.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=510987 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=518675 - http://www.mozilla.org/security/announce/
assetkey=1-26-272909-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=518675 - http://www.mozilla.org/security/announce/2009/mfsa2009-64.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996 - http://www.vupen.com/english/advisories/2009/3334
CVE ID: CVE-2009-3384 State: PUBLISHED Published: 2009-11-13T15:00:00 Last Updated: 2024-08-07T06:22:24.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36995 - http://secunia.com/advisories/43068 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 -
/lists.apple.com/archives/security-announce/2009/Nov/msg00001.html - http://www.vupen.com/english/advisories/2009/3217 - http://www.vupen.com/english/advisories/2011/0212 - http://osvdb.org/59943 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html - https://bugzilla.redhat.com/show_bug.cgi?id=525788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54241 - http://support.apple.com/kb/HT3949 - http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html - https://oval.cisecurity.org
html - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362 - http://www.securitytracker.com/id?1023166 - http://secunia.com/advisories/37397 - http://support.apple.com/kb/HT4013 - http://secunia.com/advisories/37393 - http://secunia.com/advisories/37346
CVE ID: CVE-2009-3385 State: PUBLISHED Published: 2010-03-22T17:23:00 Last Updated: 2024-08-07T06:22:24.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38830 - http://secunia.com/advisories/39001 - https://oval.cisecu
tainer: References: - http://www.securityfocus.com/bid/38830 - http://secunia.com/advisories/39001 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10271 - https://bugzilla.mozilla.org/show_bug.cgi?id=371976 - http://www.vupen.com/english/advisories/2010/0648 - http://www.mozilla.org/security/announce/2010/mfsa2010-06.html - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
CVE ID: CVE-2009-3386 State: PUBLISHED Published: 2009-11-20T17:00:00 Last Updated: 2024-08-07T06:22:24.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a private bug by reading the (1) Depends On or (2) Blocks field of a related bug. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37062 - http://www.vupen.com/english/advisories/2009/3288 - http://osvdb.org/60271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54332 - http://secunia.com/advisories/37423 - http://www.bugzilla.org/security/3.4.3/ - https://bug
.com/vulnerabilities/54332 - http://secunia.com/advisories/37423 - http://www.bugzilla.org/security/3.4.3/ - https://bugzilla.mozilla.org/show_bug.cgi?id=529416
CVE ID: CVE-2009-3387 State: PUBLISHED Published: 2010-02-03T19:00:00 Last Updated: 2024-08-07T06:22:25.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to a different product category, which allows remote attackers to obtain sensitive information via a request for a bug in opportunistic circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56004 - http://www.vupen.com/english/advisories/2010/0261 - http://www.securityfocus.com/archive/1/509282/100/0/threaded - http
http://www.vupen.com/english/advisories/2010/0261 - http://www.securityfocus.com/archive/1/509282/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=532493 - http://secunia.com/advisories/38443 - http://www.securityfocus.com/bid/38026
CVE ID: CVE-2009-3388 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T06:22:24.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37699 - https://bugzilla.mozilla.org/show_bug.cgi?id=504843 - http://securitytracker.com/id?1023335 - http://securitytracker.com/id?1023336 - http://www.vupen.com/english/advisories/2009
://securitytracker.com/id?1023335 - http://securitytracker.com/id?1023336 - http://www.vupen.com/english/advisories/2009/3547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54804 - http://secunia.com/advisories/37881 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html - http://secunia.com/advisories/37785 - http://www.ubuntu.com/usn/USN-874-1 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html - https://bugzilla.mozilla.org/show_bug.cgi?id=523816 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8009 - http://www.securityfocus.com/bid/37349 - https://www.redhat.com/archives/fedo
ition/oval%3Aorg.mitre.oval%3Adef%3A8009 - http://www.securityfocus.com/bid/37349 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html - http://secunia.com/advisories/37856 - http://www.mozilla.org/security/announce/2009/mfsa2009-66.html - http://www.securityfocus.com/bid/37369 - http://www.novell.com/linux/security/advisories/2009_63_firefox.html