Every CVE Search/ Get API key

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla...

9.3 HighPublic exploit

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Exploit likelihood

42.5%Down 39.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Record
CVE-2009-2477
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Record
CVE-2009-2477
Updated
2026-11-02
EUVDEUVD-2009-2472 No score

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Record
EUVD-2009-2472
Updated
2026-11-03
GitHub AdvisoriesGHSA-p5fj-7pgr-xv7v No score

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla...

js/src/jstracer.cpp in the Just-in-time (JIT) JavaScript compiler (aka TraceMonkey) in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a document containing P and FONT elements.

Record
GHSA-p5fj-7pgr-xv7v
Weakness
CWE-94
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMozilla Firefox 3.5 - 'escape()' Return Value Memory Corruption (Metasploit)2010-09-20
Exploit-DBNaenara Browser 3.5 (RedStar 3.0 Desktop) - 'JACKRABBIT' Client-Side Command Execution2016-12-18
Exploit-DBMozilla Firefox 3.5 - Font tags Remote Buffer Overflow2009-07-13
Exploit-DBMozilla Firefox 3.5 - 'Font tags' Remote HeapSpray (2)2009-07-20
MetasploitFirefox 3.5 escape() Return Value Memory Corruption2009-07-13

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-2477 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published July 15, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 42.5%, the 98th percentile. No source names a fixed version.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open