Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-tvr2-ecx3-d3gq
Vulnerability ID VCID-tvr2-ecx3-d3gq
Aliases CVE-2009-1312
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.
Status Published
Exploitability 2.0
Weighted Severity 0.1
Risk 0.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
epss 0.05662 https://api.first.org/data/v1/epss?cve=CVE-2009-1312
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2009-22
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1312.json
https://api.first.org/data/v1/epss?cve=CVE-2009-1312
496274 https://bugzilla.redhat.com/show_bug.cgi?id=496274
CVE-2009-1312 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1312
CVE-2009-1312;OSVDB-53952 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/32942.txt
CVE-2009-1312;OSVDB-53952 Exploit https://www.securityfocus.com/bid/34656/info
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2009-22 https://www.mozilla.org/en-US/security/advisories/mfsa2009-22
RHSA-2009:0436 https://access.redhat.com/errata/RHSA-2009:0436
RHSA-2009:0437 https://access.redhat.com/errata/RHSA-2009:0437
USN-764-1 https://usn.ubuntu.com/764-1/
Data source Exploit-DB
Date added April 22, 2009
Description Mozilla (Multiple Products) - Server Refresh Header Cross-Site Scripting
Ransomware campaign use Known
Source publication date April 22, 2009
Exploit type remote
Platform linux
Source update date April 19, 2014
Source URL https://www.securityfocus.com/bid/34656/info
Exploit Prediction Scoring System (EPSS)
Percentile 0.90336
EPSS Score 0.05662
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:05:48.387500+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201301-01 38.0.0