Every CVE Search/ Get API key

CVE-2009-1313

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox...

9.3 HighPublic exploitFix available

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.

Exploit likelihood

8.39%Down 26.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.

Record
CVE-2009-1313
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.

Record
CVE-2009-1313
Updated
2026-11-02
EUVDEUVD-2009-1311 No score

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.

Record
EUVD-2009-1311
Updated
2026-11-03
GitHub AdvisoriesGHSA-ph69-fr9j-4gj2 No score

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox...

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.

Record
GHSA-ph69-fr9j-4gj2
Updated
2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score

MozillaFirefox-50.1.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10071-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:4::as
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox
Red Hat:enterprise_linux:4::es
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox
Red Hat:enterprise_linux:4::ws
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:3.0.10-1.el4
0:3.0.10-1.el4
xulrunner
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
Show 14 moreShow less
Affected packages
PackageAffectedFixed
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
xulrunner-devel-unstable
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
firefox
Red Hat:enterprise_linux:5::client
 before 0:3.0.10-1.el5
0:3.0.10-1.el5
firefox-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.10-1.el5
0:3.0.10-1.el5
xulrunner
Red Hat:enterprise_linux:5::client
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
firefox
Red Hat:enterprise_linux:5::server
 before 0:3.0.10-1.el5
0:3.0.10-1.el5
firefox-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.10-1.el5
0:3.0.10-1.el5
xulrunner
Red Hat:enterprise_linux:5::server
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
xulrunner-devel
Red Hat:enterprise_linux:5::server
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
xulrunner-devel-unstable
Red Hat:enterprise_linux:5::server
 before 0:1.9.0.10-1.el5
0:1.9.0.10-1.el5
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 899 CVEs
 before 50.1.0-1.1
50.1.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory Corruption2009-04-27

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-1313 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published April 30, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.39%, the 95th percentile. Fixed in firefox 0:3.0.10-1.el4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,881 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open