Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/firefox@3.0.12-1?arch=el5_3
Typerpm
Namespaceredhat
Namefirefox
Version3.0.12-1
Qualifiers
arch el5_3
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-1z64-2j1v-tyam
vulnerability_id VCID-1z64-2j1v-tyam
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2462.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2462.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2462
reference_id
reference_type
scores
0
value 0.0345
scoring_system epss
scoring_elements 0.87785
published_at 2026-06-11T12:55:00Z
1
value 0.0345
scoring_system epss
scoring_elements 0.87826
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2462
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512128
reference_id 512128
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512128
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2462
reference_id CVE-2009-2462
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2462
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
reference_id mfsa2009-34
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://access.redhat.com/errata/RHSA-2009:1163
reference_id RHSA-2009:1163
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1163
8
reference_url https://access.redhat.com/errata/RHSA-2010:0153
reference_id RHSA-2010:0153
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0153
9
reference_url https://access.redhat.com/errata/RHSA-2010:0154
reference_id RHSA-2010:0154
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0154
10
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2462
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1z64-2j1v-tyam
1
url VCID-2k55-6n1d-d7b3
vulnerability_id VCID-2k55-6n1d-d7b3
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2469.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2469.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2469
reference_id
reference_type
scores
0
value 0.0647
scoring_system epss
scoring_elements 0.91287
published_at 2026-06-11T12:55:00Z
1
value 0.0647
scoring_system epss
scoring_elements 0.91318
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2469
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512142
reference_id 512142
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512142
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2469
reference_id CVE-2009-2469
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2469
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-37
reference_id mfsa2009-37
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-37
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2469
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2k55-6n1d-d7b3
2
url VCID-3wad-8kds-j7at
vulnerability_id VCID-3wad-8kds-j7at
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2467.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2467.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2467
reference_id
reference_type
scores
0
value 0.05189
scoring_system epss
scoring_elements 0.90134
published_at 2026-06-11T12:55:00Z
1
value 0.05189
scoring_system epss
scoring_elements 0.90165
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2467
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512137
reference_id 512137
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512137
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2467
reference_id CVE-2009-2467
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2467
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-35
reference_id mfsa2009-35
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-35
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2467
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3wad-8kds-j7at
3
url VCID-6fpf-cnvs-33by
vulnerability_id VCID-6fpf-cnvs-33by
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2664.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2664.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2664
reference_id
reference_type
scores
0
value 0.03012
scoring_system epss
scoring_elements 0.86889
published_at 2026-06-11T12:55:00Z
1
value 0.03012
scoring_system epss
scoring_elements 0.86936
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2664
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1618341
reference_id 1618341
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1618341
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2664
reference_id CVE-2009-2664
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2664
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-45
reference_id mfsa2009-45
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-45
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
fixed_packages
aliases CVE-2009-2664
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6fpf-cnvs-33by
4
url VCID-9ext-n6np-eyfy
vulnerability_id VCID-9ext-n6np-eyfy
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2472.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2472.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2472
reference_id
reference_type
scores
0
value 0.007
scoring_system epss
scoring_elements 0.72484
published_at 2026-06-11T12:55:00Z
1
value 0.007
scoring_system epss
scoring_elements 0.72562
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2472
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512147
reference_id 512147
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512147
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2472
reference_id CVE-2009-2472
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2472
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-40
reference_id mfsa2009-40
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-40
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2472
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9ext-n6np-eyfy
5
url VCID-bcrc-2pvq-5fap
vulnerability_id VCID-bcrc-2pvq-5fap
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2471.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2471.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2471
reference_id
reference_type
scores
0
value 0.02113
scoring_system epss
scoring_elements 0.84477
published_at 2026-06-11T12:55:00Z
1
value 0.02113
scoring_system epss
scoring_elements 0.84532
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2471
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512146
reference_id 512146
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512146
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2471
reference_id CVE-2009-2471
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2471
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-39
reference_id mfsa2009-39
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-39
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
fixed_packages
aliases CVE-2009-2471
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bcrc-2pvq-5fap
6
url VCID-m1ep-p5mv-hbeh
vulnerability_id VCID-m1ep-p5mv-hbeh
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2466.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2466.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2466
reference_id
reference_type
scores
0
value 0.05821
scoring_system epss
scoring_elements 0.90731
published_at 2026-06-11T12:55:00Z
1
value 0.05821
scoring_system epss
scoring_elements 0.9076
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2466
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512136
reference_id 512136
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512136
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2466
reference_id CVE-2009-2466
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2466
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
reference_id mfsa2009-34
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://access.redhat.com/errata/RHSA-2009:1163
reference_id RHSA-2009:1163
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1163
8
reference_url https://access.redhat.com/errata/RHSA-2010:0153
reference_id RHSA-2010:0153
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0153
9
reference_url https://access.redhat.com/errata/RHSA-2010:0154
reference_id RHSA-2010:0154
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0154
10
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2466
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m1ep-p5mv-hbeh
7
url VCID-nvew-s9v1-gkef
vulnerability_id VCID-nvew-s9v1-gkef
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2464.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2464.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2464
reference_id
reference_type
scores
0
value 0.17716
scoring_system epss
scoring_elements 0.95264
published_at 2026-06-11T12:55:00Z
1
value 0.17716
scoring_system epss
scoring_elements 0.95279
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2464
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512133
reference_id 512133
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512133
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2464
reference_id CVE-2009-2464
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2464
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/33101.txt
reference_id CVE-2009-2464;OSVDB-56229
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/33101.txt
5
reference_url https://www.securityfocus.com/bid/35775/info
reference_id CVE-2009-2464;OSVDB-56229
reference_type exploit
scores
url https://www.securityfocus.com/bid/35775/info
6
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
reference_id mfsa2009-34
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
8
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
9
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2464
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nvew-s9v1-gkef
8
url VCID-punc-emh1-73gz
vulnerability_id VCID-punc-emh1-73gz
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2463.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2463.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2463
reference_id
reference_type
scores
0
value 0.04113
scoring_system epss
scoring_elements 0.88863
published_at 2026-06-11T12:55:00Z
1
value 0.04113
scoring_system epss
scoring_elements 0.88901
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2463
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2463
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2463
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512131
reference_id 512131
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512131
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
reference_id mfsa2009-34
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2010-07
reference_id mfsa2010-07
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2010-07
7
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
8
reference_url https://access.redhat.com/errata/RHSA-2009:1163
reference_id RHSA-2009:1163
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1163
9
reference_url https://access.redhat.com/errata/RHSA-2010:0153
reference_id RHSA-2010:0153
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0153
10
reference_url https://access.redhat.com/errata/RHSA-2010:0154
reference_id RHSA-2010:0154
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0154
11
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
12
reference_url https://usn.ubuntu.com/915-1/
reference_id USN-915-1
reference_type
scores
url https://usn.ubuntu.com/915-1/
fixed_packages
aliases CVE-2009-2463
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-punc-emh1-73gz
9
url VCID-vqrp-jt3m-2ueh
vulnerability_id VCID-vqrp-jt3m-2ueh
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2465.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2465.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2465
reference_id
reference_type
scores
0
value 0.03426
scoring_system epss
scoring_elements 0.87736
published_at 2026-06-11T12:55:00Z
1
value 0.03426
scoring_system epss
scoring_elements 0.87778
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2465
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512135
reference_id 512135
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512135
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2465
reference_id CVE-2009-2465
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2465
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
reference_id mfsa2009-34
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-34
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://usn.ubuntu.com/798-1/
reference_id USN-798-1
reference_type
scores
url https://usn.ubuntu.com/798-1/
fixed_packages
aliases CVE-2009-2465
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vqrp-jt3m-2ueh
10
url VCID-yb8x-c7sq-4yd3
vulnerability_id VCID-yb8x-c7sq-4yd3
summary
Multiple vulnerabilities have been found in Mozilla Firefox,
    Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
    allow execution of arbitrary code or local privilege escalation.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2470.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2470.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2470
reference_id
reference_type
scores
0
value 0.0266
scoring_system epss
scoring_elements 0.86115
published_at 2026-06-11T12:55:00Z
1
value 0.0266
scoring_system epss
scoring_elements 0.86165
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2470
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=512145
reference_id 512145
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=512145
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2470
reference_id CVE-2009-2470
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2470
4
reference_url https://security.gentoo.org/glsa/201301-01
reference_id GLSA-201301-01
reference_type
scores
url https://security.gentoo.org/glsa/201301-01
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-38
reference_id mfsa2009-38
reference_type
scores
0
value low
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-38
6
reference_url https://access.redhat.com/errata/RHSA-2009:1162
reference_id RHSA-2009:1162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1162
7
reference_url https://access.redhat.com/errata/RHSA-2009:1163
reference_id RHSA-2009:1163
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1163
8
reference_url https://access.redhat.com/errata/RHSA-2010:0153
reference_id RHSA-2010:0153
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0153
9
reference_url https://access.redhat.com/errata/RHSA-2010:0154
reference_id RHSA-2010:0154
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0154
fixed_packages
aliases CVE-2009-2470
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yb8x-c7sq-4yd3
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@3.0.12-1%3Farch=el5_3