Vulnerability Details : CVE-2009-2044
Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2009-2044
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-2044
1.32%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 85 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-2044
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2009-2044
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-2044
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/51037
Mozilla Firefox GIF denial of service CVE-2009-2044 Vulnerability ReportVDB Entry
-
https://bugzilla.mozilla.org/show_bug.cgi?id=496265
496265 - (CVE-2009-2044) firefox crash causing by failing to load gif image as body background. [XError: 'BadAlloc (insufficient resources for operation)']Issue Tracking
-
http://e-rdc.org/v1/news.php?readmore=137
Cumpără online produse de calitate din China la prețuri accesibile și cu transport gratuit | Joom RomaniaExploit
-
http://www.securityfocus.com/bid/35280
Patch;Third Party Advisory;VDB Entry
-
http://www.securityfocus.com/archive/1/504214
Exploit;Third Party Advisory;VDB Entry
Jump to