CVE-2009-2464
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12,...
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.
Exploit likelihood
What each source reports
NVD Score used
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.
- Record
CVE-2009-2464- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.
- Record
CVE-2009-2464- Updated
- 2026-11-02
EUVDEUVD-2009-2459 No score
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.
- Record
EUVD-2009-2459- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qwmc-7c7g-54gx No score
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12,...
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.
- Record
GHSA-qwmc-7c7g-54gx- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 9 CVEs |
before 1.9.0.12-0lenny1, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.5-11.9.0.6-1 Show 6 moreShow less1.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.12-0lenny1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 11 CVEs |
before 0:3.0.12-1.el4 | 0:3.0.12-1.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:3.0.12-1.el5_3 | 0:3.0.12-1.el5_3 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:3.0.12-1.el5_3 | 0:3.0.12-1.el5_3 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:3.0.12-1.el5_3 | 0:3.0.12-1.el5_3 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:3.0.12-1.el5_3 | 0:3.0.12-1.el5_3 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:1.9.0.12-1.el5_3 | 0:1.9.0.12-1.el5_3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption | 2009-06-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2464 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published July 22, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.2%, the 96th percentile. No source names a fixed version.
References
sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1
redhat.com/archives/fedora-package-announce/2009-July/msg01032.html
secunia.com/advisories/36145
Show 60 moreShow less
lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html
rhn.redhat.com/errata/RHSA-2009-1162.html
mozilla.org/security/announce/2009/mfsa2009-34.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9594
securityfocus.com/bid/35758
vupen.com/english/advisories/2009/2152
bugzilla.mozilla.org/show_bug.cgi?id=441785
nvd.nist.gov/vuln/detail/CVE-2009-2464
github.com/advisories/GHSA-qwmc-7c7g-54gx
access.redhat.com/errata/RHSA-2009:1162
bugzilla.redhat.com/show_bug.cgi?id=512128
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1162.json
cve.org/CVERecord?id=CVE-2009-2462