Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-d5ha-6epq-afd4
Summary
Security researcher Georgi Guninski
reported that scriptable plugin content, such as Flash objects, could
be loaded and executed in SeaMonkey mail messages by embedding the
content in an iframe inside the message.  If a user were to reply to
or forward such a message, malicious JavaScript embedded in the plugin
content could potentially steal the contents of the message or files
from the local filesystem.Thunderbird was not affected by this issue.
Aliases
0
alias CVE-2009-3385
Fixed_packages
0
url pkg:mozilla/SeaMonkey@1.1.19
purl pkg:mozilla/SeaMonkey@1.1.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@1.1.19
Affected_packages
0
url pkg:rpm/redhat/seamonkey@1.0.9-0.47?arch=el3
purl pkg:rpm/redhat/seamonkey@1.0.9-0.47?arch=el3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-5bdt-dd2k-c7gq
3
vulnerability VCID-aw3w-yap1-u7cx
4
vulnerability VCID-b76x-3z8j-4fa9
5
vulnerability VCID-d5ha-6epq-afd4
6
vulnerability VCID-qqg4-kz4u-hbh8
7
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-0.47%3Farch=el3
1
url pkg:rpm/redhat/seamonkey@1.0.9-50?arch=el4_8
purl pkg:rpm/redhat/seamonkey@1.0.9-50?arch=el4_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-5bdt-dd2k-c7gq
3
vulnerability VCID-aw3w-yap1-u7cx
4
vulnerability VCID-b76x-3z8j-4fa9
5
vulnerability VCID-d5ha-6epq-afd4
6
vulnerability VCID-qqg4-kz4u-hbh8
7
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/seamonkey@1.0.9-50%3Farch=el4_8
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3385.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3385.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3385
reference_id
reference_type
scores
0
value 0.01388
scoring_system epss
scoring_elements 0.8037
published_at 2026-04-21T12:55:00Z
1
value 0.01388
scoring_system epss
scoring_elements 0.80282
published_at 2026-04-01T12:55:00Z
2
value 0.01388
scoring_system epss
scoring_elements 0.8029
published_at 2026-04-02T12:55:00Z
3
value 0.01388
scoring_system epss
scoring_elements 0.8031
published_at 2026-04-04T12:55:00Z
4
value 0.01388
scoring_system epss
scoring_elements 0.80298
published_at 2026-04-07T12:55:00Z
5
value 0.01388
scoring_system epss
scoring_elements 0.80326
published_at 2026-04-08T12:55:00Z
6
value 0.01388
scoring_system epss
scoring_elements 0.80337
published_at 2026-04-09T12:55:00Z
7
value 0.01388
scoring_system epss
scoring_elements 0.80355
published_at 2026-04-11T12:55:00Z
8
value 0.01388
scoring_system epss
scoring_elements 0.8034
published_at 2026-04-12T12:55:00Z
9
value 0.01388
scoring_system epss
scoring_elements 0.80334
published_at 2026-04-13T12:55:00Z
10
value 0.01388
scoring_system epss
scoring_elements 0.80363
published_at 2026-04-16T12:55:00Z
11
value 0.01388
scoring_system epss
scoring_elements 0.80365
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3385
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=530159
reference_id 530159
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=530159
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3385
reference_id CVE-2009-3385
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3385
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2010-06
reference_id mfsa2010-06
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2010-06
5
reference_url https://access.redhat.com/errata/RHSA-2009:1531
reference_id RHSA-2009:1531
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1531
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-d5ha-6epq-afd4