Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-nwhc-qysh-3qfk
Vulnerability ID VCID-nwhc-qysh-3qfk
Aliases CVE-2009-3987
Summary Security researcher Gregory Fleischer reported that the exception messages generated by Mozilla's GeckoActiveXObject differ based on whether or not the requested COM object's ProgID is present in the system registry. A malicious site could use this vulnerability to enumerate a list of COM objects installed on a user's system and create a profile to track the user across browsing sessions.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00812 https://api.first.org/data/v1/epss?cve=CVE-2009-3987
generic_textual low https://www.mozilla.org/en-US/security/advisories/mfsa2009-71
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3987.json
https://api.first.org/data/v1/epss?cve=CVE-2009-3987
546729 https://bugzilla.redhat.com/show_bug.cgi?id=546729
CVE-2009-3987 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3987
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2009-71 https://www.mozilla.org/en-US/security/advisories/mfsa2009-71
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.74547
EPSS Score 0.00812
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:27:40.468793+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-71.md 38.6.0