CVE-2009-3079

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-10 · updated 2026-06-16
Weakness: CWE-94

Description

Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.

Affected products

Mozilla Firefox: through 3.0.13; 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+100)

References

http://secunia.com/advisories/36670
http://secunia.com/advisories/36671
http://secunia.com/advisories/36757
http://secunia.com/advisories/37098
http://www.debian.org/security/2009/dsa-1886
http://www.mozilla.org/security/announce/2009/mfsa2009-51.html
http://www.novell.com/linux/security/advisories/2009_48_firefox.html
http://www.redhat.com/support/errata/RHSA-2009-1430.html
http://www.securityfocus.com/bid/36343
http://www.securitytracker.com/id?1022873
https://bugzilla.mozilla.org/show_bug.cgi?id=454363
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10390

Get alerted when CVE-2009-3079 or the next vulnerability affects your stack