Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-nx8g-hhbk-yyep
Summary
Mozilla upgraded several third party libraries used in media
rendering to address multiple memory safety and stability bugs
identified by members of the Mozilla community.  Some of the bugs
discovered could potentially be used by an attacker to crash a
victim's browser and execute arbitrary code on their
computer.  liboggz, libvorbis,
and liboggplay were all upgraded to address these
issues.Audio and video capabilities were added in Firefox 3.5
so prior releases of Firefox were not affected.
Aliases
0
alias CVE-2009-3370
Fixed_packages
0
url pkg:mozilla/Firefox@3.0.15
purl pkg:mozilla/Firefox@3.0.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.0.15
1
url pkg:mozilla/Firefox@3.5.4
purl pkg:mozilla/Firefox@3.5.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@3.5.4
Affected_packages
0
url pkg:rpm/redhat/firefox@3.0.15-3?arch=el5_4
purl pkg:rpm/redhat/firefox@3.0.15-3?arch=el5_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-4vaj-81k4-n3a6
3
vulnerability VCID-58z4-jhs8-kyay
4
vulnerability VCID-5bdt-dd2k-c7gq
5
vulnerability VCID-aw3w-yap1-u7cx
6
vulnerability VCID-b76x-3z8j-4fa9
7
vulnerability VCID-h68j-ht6w-jqbm
8
vulnerability VCID-nx8g-hhbk-yyep
9
vulnerability VCID-qqg4-kz4u-hbh8
10
vulnerability VCID-sua6-rkjm-qyge
11
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@3.0.15-3%3Farch=el5_4
1
url pkg:rpm/redhat/firefox@3.0.15-3?arch=el4
purl pkg:rpm/redhat/firefox@3.0.15-3?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-4vaj-81k4-n3a6
3
vulnerability VCID-58z4-jhs8-kyay
4
vulnerability VCID-5bdt-dd2k-c7gq
5
vulnerability VCID-aw3w-yap1-u7cx
6
vulnerability VCID-b76x-3z8j-4fa9
7
vulnerability VCID-h68j-ht6w-jqbm
8
vulnerability VCID-nx8g-hhbk-yyep
9
vulnerability VCID-qqg4-kz4u-hbh8
10
vulnerability VCID-sua6-rkjm-qyge
11
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@3.0.15-3%3Farch=el4
2
url pkg:rpm/redhat/nspr@4.7.6-1?arch=el5_4
purl pkg:rpm/redhat/nspr@4.7.6-1?arch=el5_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-4vaj-81k4-n3a6
3
vulnerability VCID-58z4-jhs8-kyay
4
vulnerability VCID-5bdt-dd2k-c7gq
5
vulnerability VCID-aw3w-yap1-u7cx
6
vulnerability VCID-b76x-3z8j-4fa9
7
vulnerability VCID-h68j-ht6w-jqbm
8
vulnerability VCID-nx8g-hhbk-yyep
9
vulnerability VCID-qqg4-kz4u-hbh8
10
vulnerability VCID-sua6-rkjm-qyge
11
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nspr@4.7.6-1%3Farch=el5_4
3
url pkg:rpm/redhat/nspr@4.7.6-1?arch=el4_8
purl pkg:rpm/redhat/nspr@4.7.6-1?arch=el4_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-4vaj-81k4-n3a6
3
vulnerability VCID-58z4-jhs8-kyay
4
vulnerability VCID-5bdt-dd2k-c7gq
5
vulnerability VCID-aw3w-yap1-u7cx
6
vulnerability VCID-b76x-3z8j-4fa9
7
vulnerability VCID-h68j-ht6w-jqbm
8
vulnerability VCID-nx8g-hhbk-yyep
9
vulnerability VCID-qqg4-kz4u-hbh8
10
vulnerability VCID-sua6-rkjm-qyge
11
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nspr@4.7.6-1%3Farch=el4_8
4
url pkg:rpm/redhat/xulrunner@1.9.0.15-3?arch=el5_4
purl pkg:rpm/redhat/xulrunner@1.9.0.15-3?arch=el5_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16d6-e24t-dfb7
1
vulnerability VCID-2jhf-j64s-gygy
2
vulnerability VCID-4vaj-81k4-n3a6
3
vulnerability VCID-58z4-jhs8-kyay
4
vulnerability VCID-5bdt-dd2k-c7gq
5
vulnerability VCID-aw3w-yap1-u7cx
6
vulnerability VCID-b76x-3z8j-4fa9
7
vulnerability VCID-h68j-ht6w-jqbm
8
vulnerability VCID-nx8g-hhbk-yyep
9
vulnerability VCID-qqg4-kz4u-hbh8
10
vulnerability VCID-sua6-rkjm-qyge
11
vulnerability VCID-yn4z-ymst-1bew
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xulrunner@1.9.0.15-3%3Farch=el5_4
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3370.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3370.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3370
reference_id
reference_type
scores
0
value 0.00556
scoring_system epss
scoring_elements 0.68185
published_at 2026-04-16T12:55:00Z
1
value 0.00556
scoring_system epss
scoring_elements 0.6818
published_at 2026-04-12T12:55:00Z
2
value 0.00556
scoring_system epss
scoring_elements 0.68147
published_at 2026-04-13T12:55:00Z
3
value 0.00556
scoring_system epss
scoring_elements 0.68084
published_at 2026-04-01T12:55:00Z
4
value 0.00556
scoring_system epss
scoring_elements 0.68107
published_at 2026-04-02T12:55:00Z
5
value 0.00556
scoring_system epss
scoring_elements 0.68125
published_at 2026-04-04T12:55:00Z
6
value 0.00556
scoring_system epss
scoring_elements 0.68102
published_at 2026-04-07T12:55:00Z
7
value 0.00556
scoring_system epss
scoring_elements 0.68154
published_at 2026-04-08T12:55:00Z
8
value 0.00556
scoring_system epss
scoring_elements 0.68169
published_at 2026-04-09T12:55:00Z
9
value 0.00556
scoring_system epss
scoring_elements 0.68194
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3370
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=530151
reference_id 530151
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=530151
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370
reference_id CVE-2009-3370
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-52
reference_id mfsa2009-52
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-52
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
reference_id mfsa2009-63
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
6
reference_url https://access.redhat.com/errata/RHSA-2009:1530
reference_id RHSA-2009:1530
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1530
7
reference_url https://usn.ubuntu.com/853-1/
reference_id USN-853-1
reference_type
scores
url https://usn.ubuntu.com/853-1/
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-nx8g-hhbk-yyep