CVE-2009-1044
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
Exploit likelihood
What each source reports
NVD Score used
9.3
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
- Record
CVE-2009-1044- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
- Record
CVE-2009-1044- Updated
- 2026-11-02
EUVDEUVD-2009-1045 No score
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
- Record
EUVD-2009-1045- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x5jm-2j58-gxgp No score
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...
Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
- Record
GHSA-x5jm-2j58-gxgp- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 2 CVEs |
before 1.9.0.7-0lenny2, plus listed versions 1.9.0.5-11.9.0.6-11.9.0.7-0lenny1 |
1.9.0.7-0lenny2 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.0.7-3.el4 | 0:3.0.7-3.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
Show 123 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:1.9.0.7-3.el5 | 0:1.9.0.7-3.el5 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.32.el2 | 0:1.0.9-0.32.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.9-0.36.el3 | 0:1.0.9-0.36.el3 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.9-40.el4 | 0:1.0.9-40.el4 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1044 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published March 23, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.49%, the 93rd percentile. No source names a fixed version.
References
securitytracker.com/id?1021878
dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits
twitter.com/tippingpoint1/status/1351635812
secunia.com/advisories/34510
redhat.com/archives/fedora-package-announce/2009-March/msg01077.html
secunia.com/advisories/34511
Show 194 moreShow less
mandriva.com/security/advisories?name=MDVSA-2009:084
redhat.com/support/errata/RHSA-2009-0397.html
cansecwest.com/index.html
lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html
secunia.com/advisories/34505
secunia.com/advisories/34521
redhat.com/support/errata/RHSA-2009-0398.html
securityfocus.com/archive/1/502303/100/0/threaded
secunia.com/advisories/34471
mozilla.org/security/announce/2009/mfsa2009-13.html
ubuntu.com/usn/usn-745-1
secunia.com/advisories/34527
securityfocus.com/bid/34181
debian.org/security/2009/dsa-1756
secunia.com/advisories/34792
news.cnet.com/8301-1009_3-10199652-83.html
blogs.zdnet.com/security?p=2934
zerodayinitiative.com/advisories/ZDI-09-015
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368
osvdb.org/52896
vupen.com/english/advisories/2009/0864
redhat.com/archives/fedora-package-announce/2009-March/msg01040.html
h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889
secunia.com/advisories/34549
secunia.com/advisories/34550
support.avaya.com/elmodocs2/security/ASA-2009-113.htm
dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009
redhat.com/archives/fedora-package-announce/2009-March/msg01023.html
bugzilla.mozilla.org/show_bug.cgi?id=484320
blogs.zdnet.com/security?p=2941
nvd.nist.gov/vuln/detail/CVE-2009-1044
github.com/advisories/GHSA-x5jm-2j58-gxgp
access.redhat.com/errata/RHSA-2009:0397
bugzilla.redhat.com/show_bug.cgi?id=492211
redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=492212
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0397.json
access.redhat.com/security/cve/CVE-2009-1044
cve.org/CVERecord?id=CVE-2009-1044
access.redhat.com/security/cve/CVE-2009-1169
cve.org/CVERecord?id=CVE-2009-1169
nvd.nist.gov/vuln/detail/CVE-2009-1169
access.redhat.com/errata/RHSA-2009:0398
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0398.json
suse.com/security/cve/CVE-2008-5913
suse.com/security/cve/CVE-2009-0040
suse.com/security/cve/CVE-2009-0652
suse.com/security/cve/CVE-2009-0771
suse.com/security/cve/CVE-2009-0772
suse.com/security/cve/CVE-2009-0773
suse.com/security/cve/CVE-2009-0774
suse.com/security/cve/CVE-2009-0775
suse.com/security/cve/CVE-2009-0776
suse.com/security/cve/CVE-2009-0777
suse.com/security/cve/CVE-2009-1044
suse.com/security/cve/CVE-2009-1169
suse.com/security/cve/CVE-2009-1302
suse.com/security/cve/CVE-2009-1303
suse.com/security/cve/CVE-2009-1304
suse.com/security/cve/CVE-2009-1305
suse.com/security/cve/CVE-2009-1306
suse.com/security/cve/CVE-2009-1307
suse.com/security/cve/CVE-2009-1308
suse.com/security/cve/CVE-2009-1309
suse.com/security/cve/CVE-2009-1310
suse.com/security/cve/CVE-2009-1311
suse.com/security/cve/CVE-2009-1312
suse.com/security/cve/CVE-2009-1313
suse.com/security/cve/CVE-2009-1563
suse.com/security/cve/CVE-2009-2470
suse.com/security/cve/CVE-2009-2654
suse.com/security/cve/CVE-2009-3069
suse.com/security/cve/CVE-2009-3070
suse.com/security/cve/CVE-2009-3071
suse.com/security/cve/CVE-2009-3072
suse.com/security/cve/CVE-2009-3073
suse.com/security/cve/CVE-2009-3074
suse.com/security/cve/CVE-2009-3075
suse.com/security/cve/CVE-2009-3077
suse.com/security/cve/CVE-2009-3078
suse.com/security/cve/CVE-2009-3079
suse.com/security/cve/CVE-2009-3274
suse.com/security/cve/CVE-2009-3370
suse.com/security/cve/CVE-2009-3371
suse.com/security/cve/CVE-2009-3372
suse.com/security/cve/CVE-2009-3373
suse.com/security/cve/CVE-2009-3374
suse.com/security/cve/CVE-2009-3375
suse.com/security/cve/CVE-2009-3376
suse.com/security/cve/CVE-2009-3377
suse.com/security/cve/CVE-2009-3378
suse.com/security/cve/CVE-2009-3379
suse.com/security/cve/CVE-2009-3380
suse.com/security/cve/CVE-2009-3381
suse.com/security/cve/CVE-2009-3383
suse.com/security/cve/CVE-2009-3388
suse.com/security/cve/CVE-2009-3389
suse.com/security/cve/CVE-2009-3555
suse.com/security/cve/CVE-2009-3979
suse.com/security/cve/CVE-2009-3980
suse.com/security/cve/CVE-2009-3982
suse.com/security/cve/CVE-2009-3983
suse.com/security/cve/CVE-2009-3984
suse.com/security/cve/CVE-2009-3985
suse.com/security/cve/CVE-2010-0164
suse.com/security/cve/CVE-2010-0165
suse.com/security/cve/CVE-2010-0166
suse.com/security/cve/CVE-2010-0167
suse.com/security/cve/CVE-2010-0168
suse.com/security/cve/CVE-2010-0169
suse.com/security/cve/CVE-2010-0170
suse.com/security/cve/CVE-2010-0171
suse.com/security/cve/CVE-2010-0172
suse.com/security/cve/CVE-2010-0173
suse.com/security/cve/CVE-2010-0174
suse.com/security/cve/CVE-2010-0176
suse.com/security/cve/CVE-2010-0177
suse.com/security/cve/CVE-2010-0178
suse.com/security/cve/CVE-2010-0181
suse.com/security/cve/CVE-2010-0182
suse.com/security/cve/CVE-2010-0654
suse.com/security/cve/CVE-2010-1028
suse.com/security/cve/CVE-2010-1121
suse.com/security/cve/CVE-2010-1125
suse.com/security/cve/CVE-2010-1196
suse.com/security/cve/CVE-2010-1197
suse.com/security/cve/CVE-2010-1198
suse.com/security/cve/CVE-2010-1199
suse.com/security/cve/CVE-2010-1200
suse.com/security/cve/CVE-2010-1201
suse.com/security/cve/CVE-2010-1202
suse.com/security/cve/CVE-2010-1203
suse.com/security/cve/CVE-2010-1205
suse.com/security/cve/CVE-2010-1206
suse.com/security/cve/CVE-2010-1207
suse.com/security/cve/CVE-2010-1208
suse.com/security/cve/CVE-2010-1209
suse.com/security/cve/CVE-2010-1210
suse.com/security/cve/CVE-2010-1211
suse.com/security/cve/CVE-2010-1212
suse.com/security/cve/CVE-2010-1213
suse.com/security/cve/CVE-2010-1214
suse.com/security/cve/CVE-2010-1215
suse.com/security/cve/CVE-2010-2751
suse.com/security/cve/CVE-2010-2752
suse.com/security/cve/CVE-2010-2753
suse.com/security/cve/CVE-2010-2754
suse.com/security/cve/CVE-2010-2755
suse.com/security/cve/CVE-2010-2760
suse.com/security/cve/CVE-2010-2762
suse.com/security/cve/CVE-2010-2764
suse.com/security/cve/CVE-2010-2765
suse.com/security/cve/CVE-2010-2766
suse.com/security/cve/CVE-2010-2767
suse.com/security/cve/CVE-2010-2768
suse.com/security/cve/CVE-2010-2769
suse.com/security/cve/CVE-2010-3166
suse.com/security/cve/CVE-2010-3167
suse.com/security/cve/CVE-2010-3168
suse.com/security/cve/CVE-2010-3169
suse.com/security/cve/CVE-2010-3170
suse.com/security/cve/CVE-2010-3173
suse.com/security/cve/CVE-2010-3174
suse.com/security/cve/CVE-2010-3175
suse.com/security/cve/CVE-2010-3176
suse.com/security/cve/CVE-2010-3177
suse.com/security/cve/CVE-2010-3178
suse.com/security/cve/CVE-2010-3179
suse.com/security/cve/CVE-2010-3180
suse.com/security/cve/CVE-2010-3182
suse.com/security/cve/CVE-2010-3183
suse.com/security/cve/CVE-2010-3765
suse.com/security/cve/CVE-2011-0068
suse.com/security/cve/CVE-2011-0069
suse.com/security/cve/CVE-2011-0070
suse.com/security/cve/CVE-2011-0079
suse.com/security/cve/CVE-2011-0080
suse.com/security/cve/CVE-2011-0081
suse.com/security/cve/CVE-2011-0084
suse.com/security/cve/CVE-2011-1187
suse.com/security/cve/CVE-2011-1202
suse.com/security/cve/CVE-2011-2366
suse.com/security/cve/CVE-2011-2367
suse.com/security/cve/CVE-2011-2368
suse.com/security/cve/CVE-2011-2369
suse.com/security/cve/CVE-2011-2370
suse.com/security/cve/CVE-2011-2371
suse.com/security/cve/CVE-2011-2372
suse.com/security/cve/CVE-2011-2373
suse.com/security/cve/CVE-2011-2374
suse.com/security/cve/CVE-2011-2375
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,938 references. The JSON record has them.