Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-h68j-ht6w-jqbm
Vulnerability ID VCID-h68j-ht6w-jqbm
Aliases CVE-2009-3373
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-122 Heap-based Buffer Overflow
System Score Found at
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
epss 0.11615 https://api.first.org/data/v1/epss?cve=CVE-2009-3373
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2009-56
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3373.json
https://api.first.org/data/v1/epss?cve=CVE-2009-3373
530156 https://bugzilla.redhat.com/show_bug.cgi?id=530156
CVE-2009-3373 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3373
CVE-2009-3373;OSVDB-59393 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/33313.txt
CVE-2009-3373;OSVDB-59393 Exploit https://www.securityfocus.com/bid/36855/info
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2009-56 https://www.mozilla.org/en-US/security/advisories/mfsa2009-56
RHSA-2009:1530 https://access.redhat.com/errata/RHSA-2009:1530
USN-853-1 https://usn.ubuntu.com/853-1/
Data source Exploit-DB
Date added Oct. 27, 2009
Description Mozilla Firefox 3.5.3 / SeaMonkey 1.1.17 - 'libpr0n' .GIF Parser Heap Buffer Overflow
Ransomware campaign use Known
Source publication date Oct. 27, 2009
Exploit type remote
Platform linux
Source update date Oct. 27, 2017
Source URL https://www.securityfocus.com/bid/36855/info
Exploit Prediction Scoring System (EPSS)
Percentile 0.93616
EPSS Score 0.11615
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:06:20.047009+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201301-01 38.0.0