Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-nx8g-hhbk-yyep
Vulnerability ID VCID-nx8g-hhbk-yyep
Aliases CVE-2009-3370
Summary Mozilla upgraded several third party libraries used in media rendering to address multiple memory safety and stability bugs identified by members of the Mozilla community. Some of the bugs discovered could potentially be used by an attacker to crash a victim's browser and execute arbitrary code on their computer. liboggz, libvorbis, and liboggplay were all upgraded to address these issues.Audio and video capabilities were added in Firefox 3.5 so prior releases of Firefox were not affected.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
epss 0.00556 https://api.first.org/data/v1/epss?cve=CVE-2009-3370
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2009-52
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3370.json
https://api.first.org/data/v1/epss?cve=CVE-2009-3370
530151 https://bugzilla.redhat.com/show_bug.cgi?id=530151
CVE-2009-3370 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370
mfsa2009-52 https://www.mozilla.org/en-US/security/advisories/mfsa2009-52
mfsa2009-63 https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
RHSA-2009:1530 https://access.redhat.com/errata/RHSA-2009:1530
USN-853-1 https://usn.ubuntu.com/853-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.68084
EPSS Score 0.00556
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:18:08.470114+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2009/mfsa2009-63.md 38.0.0