What’s Vulnerable › Vulnerabilities

CVE-2009-0352

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-02-04 · updated 2026-06-16
• Weakness: CWE-399

Description

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.

Affected products

• Mozilla Firefox: 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5
• Mozilla Seamonkey: through 1.1.13; 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.5, 1.0.6 (+18)
• Mozilla Thunderbird: through 2.0.0.19; 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+32)

References

• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html
• http://rhn.redhat.com/errata/RHSA-2009-0256.html
• http://secunia.com/advisories/33799
• http://secunia.com/advisories/33802
• http://secunia.com/advisories/33808
• http://secunia.com/advisories/33809
• http://secunia.com/advisories/33816
• http://secunia.com/advisories/33831
• http://secunia.com/advisories/33841
• http://secunia.com/advisories/33846
• http://secunia.com/advisories/33869

Get alerted when CVE-2009-0352 or the next vulnerability affects your stack