CVE-2009-0355
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block...
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
Exploit likelihood
What each source reports
NVD Score used
5.4
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
- Record
CVE-2009-0355- CVSS 2.0
- 5.4 Medium
AV:N/AC:H/Au:N/C:C/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
- Record
CVE-2009-0355- Updated
- 2026-11-02
EUVDEUVD-2009-0359 No score
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
- Record
EUVD-2009-0359- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2q7-pj3w-pr6f No score
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block...
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
- Record
GHSA-h2q7-pj3w-pr6f- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10600-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
Show 166 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nss-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.0.6-1.el4 | 0:3.0.6-1.el4 |
nssRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nss-toolsRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:3.12.2.0-3.el4 | 0:3.12.2.0-3.el4 |
nssRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
nssRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-toolsRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.0.6-1.el5 | 0:3.0.6-1.el5 |
nssRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-pkcs11-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
nss-toolsRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:3.12.2.0-4.el5 | 0:3.12.2.0-4.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs |
before 0:1.9.0.6-1.el5 | 0:1.9.0.6-1.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.27.el2 | 0:1.0.9-0.27.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:1.0.9-0.32.el3 | 0:1.0.9-0.32.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:1.0.9-35.el4 | 0:1.0.9-35.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:1.5.0.12-19.el4 | 0:1.5.0.12-19.el4 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.0.0.21-1.el5 | 0:2.0.0.21-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 7 CVEs |
before 0:2.0.0.21-1.el5 | 0:2.0.0.21-1.el5 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 7 CVEs |
before 0:2.0.0.21-1.el5 | 0:2.0.0.21-1.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 7 CVEs |
before 0:2.0.0.21-1.el5 | 0:2.0.0.21-1.el5 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 661 CVEs |
before 92.0-1.2 | 92.0-1.2 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0355 is a medium vulnerability (CVSS 5.4) in Mozilla Firefox, published February 4, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. No source names a fixed version.
References
secunia.com/advisories/33808
vupen.com/english/advisories/2009/0313
lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html
secunia.com/advisories/33809
mandriva.com/security/advisories?name=MDVSA-2009:044
rhn.redhat.com/errata/RHSA-2009-0256.html
Show 194 moreShow less
support.avaya.com/elmodocs2/security/ASA-2009-040.htm
secunia.com/advisories/33831
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161
ubuntu.com/usn/usn-717-2
redhat.com/support/errata/RHSA-2009-0258.html
mozilla.org/security/announce/2009/mfsa2009-03.html
bugzilla.mozilla.org/show_bug.cgi?id=466937
secunia.com/advisories/34417
secunia.com/advisories/33841
secunia.com/advisories/33816
secunia.com/advisories/33846
secunia.com/advisories/33799
redhat.com/archives/fedora-package-announce/2009-March/msg00769.html
redhat.com/support/errata/RHSA-2009-0257.html
redhat.com/archives/fedora-package-announce/2009-March/msg00771.html
securityfocus.com/bid/33598
redhat.com/archives/fedora-package-announce/2009-February/msg00240.html
secunia.com/advisories/34324
secunia.com/advisories/33869
ubuntu.com/usn/usn-717-1
securitytracker.com/id?1021665
nvd.nist.gov/vuln/detail/CVE-2009-0355
github.com/advisories/GHSA-h2q7-pj3w-pr6f
access.redhat.com/errata/RHSA-2009:0256
redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=456849
bugzilla.redhat.com/show_bug.cgi?id=483139
bugzilla.redhat.com/show_bug.cgi?id=483141
bugzilla.redhat.com/show_bug.cgi?id=483142
bugzilla.redhat.com/show_bug.cgi?id=483143
bugzilla.redhat.com/show_bug.cgi?id=483144
bugzilla.redhat.com/show_bug.cgi?id=483145
bugzilla.redhat.com/show_bug.cgi?id=483150
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0256.json
access.redhat.com/security/cve/CVE-2009-0352
cve.org/CVERecord?id=CVE-2009-0352
nvd.nist.gov/vuln/detail/CVE-2009-0352
access.redhat.com/security/cve/CVE-2009-0353
cve.org/CVERecord?id=CVE-2009-0353
nvd.nist.gov/vuln/detail/CVE-2009-0353
access.redhat.com/security/cve/CVE-2009-0354
cve.org/CVERecord?id=CVE-2009-0354
nvd.nist.gov/vuln/detail/CVE-2009-0354
access.redhat.com/security/cve/CVE-2009-0355
cve.org/CVERecord?id=CVE-2009-0355
access.redhat.com/security/cve/CVE-2009-0356
cve.org/CVERecord?id=CVE-2009-0356
nvd.nist.gov/vuln/detail/CVE-2009-0356
access.redhat.com/security/cve/CVE-2009-0357
cve.org/CVERecord?id=CVE-2009-0357
nvd.nist.gov/vuln/detail/CVE-2009-0357
access.redhat.com/security/cve/CVE-2009-0358
cve.org/CVERecord?id=CVE-2009-0358
nvd.nist.gov/vuln/detail/CVE-2009-0358
access.redhat.com/errata/RHSA-2009:0257
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0257.json
access.redhat.com/errata/RHSA-2009:0258
bugzilla.redhat.com/show_bug.cgi?id=488273
bugzilla.redhat.com/show_bug.cgi?id=488283
bugzilla.redhat.com/show_bug.cgi?id=488287
bugzilla.redhat.com/show_bug.cgi?id=488290
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0258.json
access.redhat.com/security/cve/CVE-2009-0772
cve.org/CVERecord?id=CVE-2009-0772
nvd.nist.gov/vuln/detail/CVE-2009-0772
access.redhat.com/security/cve/CVE-2009-0774
cve.org/CVERecord?id=CVE-2009-0774
nvd.nist.gov/vuln/detail/CVE-2009-0774
access.redhat.com/security/cve/CVE-2009-0775
cve.org/CVERecord?id=CVE-2009-0775
nvd.nist.gov/vuln/detail/CVE-2009-0775
access.redhat.com/security/cve/CVE-2009-0776
cve.org/CVERecord?id=CVE-2009-0776
nvd.nist.gov/vuln/detail/CVE-2009-0776
suse.com/security/cve/CVE-2006-6077
suse.com/security/cve/CVE-2007-0008
suse.com/security/cve/CVE-2007-0009
suse.com/security/cve/CVE-2007-0078
suse.com/security/cve/CVE-2007-0079
suse.com/security/cve/CVE-2007-0775
suse.com/security/cve/CVE-2007-0776
suse.com/security/cve/CVE-2007-0777
suse.com/security/cve/CVE-2007-0780
suse.com/security/cve/CVE-2007-0800
suse.com/security/cve/CVE-2007-0981
suse.com/security/cve/CVE-2007-0995
suse.com/security/cve/CVE-2007-0996
suse.com/security/cve/CVE-2007-3089
suse.com/security/cve/CVE-2007-3285
suse.com/security/cve/CVE-2007-3656
suse.com/security/cve/CVE-2007-3670
suse.com/security/cve/CVE-2007-3734
suse.com/security/cve/CVE-2007-3735
suse.com/security/cve/CVE-2007-3736
suse.com/security/cve/CVE-2007-3737
suse.com/security/cve/CVE-2007-3738
suse.com/security/cve/CVE-2008-0412
suse.com/security/cve/CVE-2008-0414
suse.com/security/cve/CVE-2008-0415
suse.com/security/cve/CVE-2008-0417
suse.com/security/cve/CVE-2008-0418
suse.com/security/cve/CVE-2008-0419
suse.com/security/cve/CVE-2008-0591
suse.com/security/cve/CVE-2008-0592
suse.com/security/cve/CVE-2008-0593
suse.com/security/cve/CVE-2008-0594
suse.com/security/cve/CVE-2008-4063
suse.com/security/cve/CVE-2009-0352
suse.com/security/cve/CVE-2009-0354
suse.com/security/cve/CVE-2009-0355
suse.com/security/cve/CVE-2009-0356
suse.com/security/cve/CVE-2009-0357
suse.com/security/cve/CVE-2009-0358
suse.com/security/cve/CVE-2017-16541
suse.com/security/cve/CVE-2017-5373
suse.com/security/cve/CVE-2017-5374
suse.com/security/cve/CVE-2017-5375
suse.com/security/cve/CVE-2017-5376
suse.com/security/cve/CVE-2017-5377
suse.com/security/cve/CVE-2017-5378
suse.com/security/cve/CVE-2017-5379
suse.com/security/cve/CVE-2017-5380
suse.com/security/cve/CVE-2017-5381
suse.com/security/cve/CVE-2017-5382
suse.com/security/cve/CVE-2017-5383
suse.com/security/cve/CVE-2017-5384
suse.com/security/cve/CVE-2017-5385
suse.com/security/cve/CVE-2017-5386
suse.com/security/cve/CVE-2017-5387
suse.com/security/cve/CVE-2017-5388
suse.com/security/cve/CVE-2017-5389
suse.com/security/cve/CVE-2017-5390
suse.com/security/cve/CVE-2017-5391
suse.com/security/cve/CVE-2017-5392
suse.com/security/cve/CVE-2017-5393
suse.com/security/cve/CVE-2017-5394
suse.com/security/cve/CVE-2017-5395
suse.com/security/cve/CVE-2017-5396
suse.com/security/cve/CVE-2017-5398
suse.com/security/cve/CVE-2017-5399
suse.com/security/cve/CVE-2017-5400
suse.com/security/cve/CVE-2017-5401
suse.com/security/cve/CVE-2017-5402
suse.com/security/cve/CVE-2017-5403
suse.com/security/cve/CVE-2017-5404
suse.com/security/cve/CVE-2017-5405
suse.com/security/cve/CVE-2017-5406
suse.com/security/cve/CVE-2017-5407
suse.com/security/cve/CVE-2017-5408
suse.com/security/cve/CVE-2017-5410
suse.com/security/cve/CVE-2017-5412
suse.com/security/cve/CVE-2017-5413
suse.com/security/cve/CVE-2017-5414
suse.com/security/cve/CVE-2017-5415
suse.com/security/cve/CVE-2017-5416
suse.com/security/cve/CVE-2017-5417
suse.com/security/cve/CVE-2017-5418
suse.com/security/cve/CVE-2017-5419
suse.com/security/cve/CVE-2017-5420
suse.com/security/cve/CVE-2017-5421
suse.com/security/cve/CVE-2017-5422
suse.com/security/cve/CVE-2017-5426
suse.com/security/cve/CVE-2017-5427
suse.com/security/cve/CVE-2017-5428
suse.com/security/cve/CVE-2017-5429
suse.com/security/cve/CVE-2017-5430
suse.com/security/cve/CVE-2017-5432
suse.com/security/cve/CVE-2017-5433
suse.com/security/cve/CVE-2017-5434
suse.com/security/cve/CVE-2017-5435
suse.com/security/cve/CVE-2017-5436
suse.com/security/cve/CVE-2017-5437
suse.com/security/cve/CVE-2017-5438
suse.com/security/cve/CVE-2017-5439
suse.com/security/cve/CVE-2017-5440
suse.com/security/cve/CVE-2017-5441
suse.com/security/cve/CVE-2017-5442
suse.com/security/cve/CVE-2017-5443
suse.com/security/cve/CVE-2017-5444
suse.com/security/cve/CVE-2017-5445
suse.com/security/cve/CVE-2017-5446
suse.com/security/cve/CVE-2017-5447
suse.com/security/cve/CVE-2017-5448
suse.com/security/cve/CVE-2017-5449
suse.com/security/cve/CVE-2017-5451
suse.com/security/cve/CVE-2017-5453
suse.com/security/cve/CVE-2017-5454
suse.com/security/cve/CVE-2017-5455
suse.com/security/cve/CVE-2017-5456
suse.com/security/cve/CVE-2017-5458
suse.com/security/cve/CVE-2017-5459
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,743 references. The JSON record has them.