Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:mozilla/Firefox@3.5.4
purl pkg:mozilla/Firefox@3.5.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (11)
Vulnerability Summary Aliases
VCID-2jhf-j64s-gygy Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code containing a very long string to be converted to a floating point number which would result in improper memory allocation and the execution of an arbitrary memory location. This vulnerability could thus be leveraged by the attacker to run arbitrary code on a victim's computer.Update: The underlying flaw in the dtoa routines used by Mozilla appears to be essentially the same as that reported against the libc gdtoa routine by Maksymilian Arciemowicz. CVE-2009-0689
VCID-4174-fw6t-uyet Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3371
VCID-4vaj-81k4-n3a6 Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3374
VCID-58z4-jhs8-kyay Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3372
VCID-5bdt-dd2k-c7gq Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3376
VCID-aw3w-yap1-u7cx Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3375
VCID-b76x-3z8j-4fa9 Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3274
VCID-bryr-g74p-73fj Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3377
VCID-h68j-ht6w-jqbm Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3373
VCID-nx8g-hhbk-yyep Mozilla upgraded several third party libraries used in media rendering to address multiple memory safety and stability bugs identified by members of the Mozilla community. Some of the bugs discovered could potentially be used by an attacker to crash a victim's browser and execute arbitrary code on their computer. liboggz, libvorbis, and liboggplay were all upgraded to address these issues.Audio and video capabilities were added in Firefox 3.5 so prior releases of Firefox were not affected. CVE-2009-3370
VCID-yn4z-ymst-1bew Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. CVE-2009-3380

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:18:10.759924+00:00 Mozilla Importer Fixing VCID-4174-fw6t-uyet https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-54.md 38.0.0
2026-04-01T13:18:10.638114+00:00 Mozilla Importer Fixing VCID-nx8g-hhbk-yyep https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-52.md 38.0.0
2026-04-01T13:18:09.880274+00:00 Mozilla Importer Fixing VCID-yn4z-ymst-1bew https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-64.md 38.0.0
2026-04-01T13:18:09.273918+00:00 Mozilla Importer Fixing VCID-4vaj-81k4-n3a6 https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-57.md 38.0.0
2026-04-01T13:18:08.518539+00:00 Mozilla Importer Fixing VCID-h68j-ht6w-jqbm https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-56.md 38.0.0
2026-04-01T13:18:08.376622+00:00 Mozilla Importer Fixing VCID-bryr-g74p-73fj https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-63.md 38.0.0
2026-04-01T13:18:08.319121+00:00 Mozilla Importer Fixing VCID-58z4-jhs8-kyay https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-55.md 38.0.0
2026-04-01T13:18:08.272079+00:00 Mozilla Importer Fixing VCID-2jhf-j64s-gygy https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-59.md 38.0.0
2026-04-01T13:18:07.997645+00:00 Mozilla Importer Fixing VCID-aw3w-yap1-u7cx https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-61.md 38.0.0
2026-04-01T13:18:07.281535+00:00 Mozilla Importer Fixing VCID-5bdt-dd2k-c7gq https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-62.md 38.0.0
2026-04-01T13:18:06.892408+00:00 Mozilla Importer Fixing VCID-b76x-3z8j-4fa9 https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-53.md 38.0.0