Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-m4ku-qwf1-zbd6
Vulnerability ID VCID-m4ku-qwf1-zbd6
Aliases CVE-2009-1313
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
epss 0.32166 https://api.first.org/data/v1/epss?cve=CVE-2009-1313
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2009-23
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1313.json
https://api.first.org/data/v1/epss?cve=CVE-2009-1313
497447 https://bugzilla.redhat.com/show_bug.cgi?id=497447
CVE-2009-1313 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1313
CVE-2009-1313;OSVDB-54174 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/32961.html
CVE-2009-1313;OSVDB-54174 Exploit https://www.securityfocus.com/bid/34743/info
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2009-23 https://www.mozilla.org/en-US/security/advisories/mfsa2009-23
RHSA-2009:0449 https://access.redhat.com/errata/RHSA-2009:0449
USN-765-1 https://usn.ubuntu.com/765-1/
Data source Exploit-DB
Date added April 27, 2009
Description Mozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory Corruption
Ransomware campaign use Known
Source publication date April 27, 2009
Exploit type dos
Platform linux
Source update date April 22, 2014
Source URL https://www.securityfocus.com/bid/34743/info
Exploit Prediction Scoring System (EPSS)
Percentile 0.96802
EPSS Score 0.32166
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:05:48.960874+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201301-01 38.0.0