CVE-2009-3076
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1)...
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.
Exploit likelihood
What each source reports
NVD Score used
9.3
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.
- Record
CVE-2009-3076- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.
- Record
CVE-2009-3076- Updated
- 2026-11-02
EUVDEUVD-2009-3060 No score
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.
- Record
EUVD-2009-3060- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-38w6-8hf5-r299 No score
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1)...
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.
- Record
GHSA-38w6-8hf5-r299- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 8 CVEs |
before 1.9.0.14-0lenny1, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 10 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.14-0lenny1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
nsprRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-develRed Hat:enterprise_linux:4::as From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
nsprRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
Show 117 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nspr-develRed Hat:enterprise_linux:4::desktop From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
nsprRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-develRed Hat:enterprise_linux:4::es From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:3.0.14-1.el4 | 0:3.0.14-1.el4 |
nsprRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nspr-develRed Hat:enterprise_linux:4::ws From an advisory covering 10 CVEs |
before 0:4.7.5-1.el4_8 | 0:4.7.5-1.el4_8 |
nsprRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
nspr-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
nspr-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.0.14-1.el5_4 | 0:3.0.14-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:3.0.14-1.el5_4 | 0:3.0.14-1.el5_4 |
nsprRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
nspr-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.0.14-1.el5_4 | 0:3.0.14-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:3.0.14-1.el5_4 | 0:3.0.14-1.el5_4 |
nsprRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
nspr-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
nspr-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:4.7.5-1.el5_4 | 0:4.7.5-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:1.9.0.14-1.el5_4 | 0:1.9.0.14-1.el5_4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 5 CVEs |
before 0:1.0.9-48.el4_8 | 0:1.0.9-48.el4_8 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:1.0.9-0.45.el3 | 0:1.0.9-0.45.el3 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 19 CVEs |
before 0:2.0.0.24-2.el5_4 | 0:2.0.0.24-2.el5_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 19 CVEs |
before 0:2.0.0.24-2.el5_4 | 0:2.0.0.24-2.el5_4 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 19 CVEs |
before 0:2.0.0.24-2.el5_4 | 0:2.0.0.24-2.el5_4 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 19 CVEs |
before 0:2.0.0.24-2.el5_4 | 0:2.0.0.24-2.el5_4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 19 CVEs |
before 0:1.5.0.12-25.el4 | 0:1.5.0.12-25.el4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Mozilla Firefox < 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule | 2009-09-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3076 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published September 10, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.72%, the 93rd percentile. No source names a fixed version.
References
securitytracker.com/id?1022877
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9306
debian.org/security/2009/dsa-1885
redhat.com/support/errata/RHSA-2010-0153.html
securityfocus.com/bid/36343
novell.com/linux/security/advisories/2009_48_firefox.html
Show 137 moreShow less
redhat.com/support/errata/RHSA-2009-1430.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6140
vupen.com/english/advisories/2010/0650
mozilla.org/security/announce/2009/mfsa2009-48.html
secunia.com/advisories/36692
secunia.com/advisories/36670
secunia.com/advisories/36671
secunia.com/advisories/36669
redhat.com/support/errata/RHSA-2010-0154.html
redhat.com/support/errata/RHSA-2009-1432.html
bugzilla.mozilla.org/show_bug.cgi?id=326628
bugzilla.mozilla.org/show_bug.cgi?id=509413
secunia.com/advisories/37098
redhat.com/support/errata/RHSA-2009-1431.html
nvd.nist.gov/vuln/detail/CVE-2009-3076
github.com/advisories/GHSA-38w6-8hf5-r299
access.redhat.com/errata/RHSA-2009:1430
access.redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=521311
bugzilla.redhat.com/show_bug.cgi?id=521686
bugzilla.redhat.com/show_bug.cgi?id=521687
bugzilla.redhat.com/show_bug.cgi?id=521688
bugzilla.redhat.com/show_bug.cgi?id=521690
bugzilla.redhat.com/show_bug.cgi?id=521691
bugzilla.redhat.com/show_bug.cgi?id=521692
bugzilla.redhat.com/show_bug.cgi?id=521693
bugzilla.redhat.com/show_bug.cgi?id=521694
bugzilla.redhat.com/show_bug.cgi?id=521695
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1430.json
access.redhat.com/security/cve/CVE-2009-2654
cve.org/CVERecord?id=CVE-2009-2654
nvd.nist.gov/vuln/detail/CVE-2009-2654
access.redhat.com/security/cve/CVE-2009-3070
cve.org/CVERecord?id=CVE-2009-3070
nvd.nist.gov/vuln/detail/CVE-2009-3070
access.redhat.com/security/cve/CVE-2009-3071
cve.org/CVERecord?id=CVE-2009-3071
nvd.nist.gov/vuln/detail/CVE-2009-3071
access.redhat.com/security/cve/CVE-2009-3072
cve.org/CVERecord?id=CVE-2009-3072
nvd.nist.gov/vuln/detail/CVE-2009-3072
access.redhat.com/security/cve/CVE-2009-3074
cve.org/CVERecord?id=CVE-2009-3074
nvd.nist.gov/vuln/detail/CVE-2009-3074
access.redhat.com/security/cve/CVE-2009-3075
cve.org/CVERecord?id=CVE-2009-3075
nvd.nist.gov/vuln/detail/CVE-2009-3075
access.redhat.com/security/cve/CVE-2009-3076
cve.org/CVERecord?id=CVE-2009-3076
access.redhat.com/security/cve/CVE-2009-3077
cve.org/CVERecord?id=CVE-2009-3077
nvd.nist.gov/vuln/detail/CVE-2009-3077
access.redhat.com/security/cve/CVE-2009-3078
cve.org/CVERecord?id=CVE-2009-3078
nvd.nist.gov/vuln/detail/CVE-2009-3078
access.redhat.com/security/cve/CVE-2009-3079
cve.org/CVERecord?id=CVE-2009-3079
nvd.nist.gov/vuln/detail/CVE-2009-3079
access.redhat.com/errata/RHSA-2009:1431
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1431.json
access.redhat.com/errata/RHSA-2009:1432
bugzilla.redhat.com/show_bug.cgi?id=510197
bugzilla.redhat.com/show_bug.cgi?id=510251
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1432.json
access.redhat.com/security/cve/CVE-2009-2408
cve.org/CVERecord?id=CVE-2009-2408
nvd.nist.gov/vuln/detail/CVE-2009-2408
access.redhat.com/security/cve/CVE-2009-2409
cve.org/CVERecord?id=CVE-2009-2409
nvd.nist.gov/vuln/detail/CVE-2009-2409
access.redhat.com/errata/RHSA-2010:0153
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=512128
bugzilla.redhat.com/show_bug.cgi?id=512131
bugzilla.redhat.com/show_bug.cgi?id=512136
bugzilla.redhat.com/show_bug.cgi?id=512145
bugzilla.redhat.com/show_bug.cgi?id=524815
bugzilla.redhat.com/show_bug.cgi?id=530162
bugzilla.redhat.com/show_bug.cgi?id=530168
bugzilla.redhat.com/show_bug.cgi?id=530567
bugzilla.redhat.com/show_bug.cgi?id=546694
bugzilla.redhat.com/show_bug.cgi?id=566047
bugzilla.redhat.com/show_bug.cgi?id=566050
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0153.json
access.redhat.com/security/cve/CVE-2009-0689
bugzilla.redhat.com/show_bug.cgi?id=539784
cve.org/CVERecord?id=CVE-2009-0689
nvd.nist.gov/vuln/detail/CVE-2009-0689
access.redhat.com/security/cve/CVE-2009-1571
cve.org/CVERecord?id=CVE-2009-1571
nvd.nist.gov/vuln/detail/CVE-2009-1571
access.redhat.com/security/cve/CVE-2009-2462
cve.org/CVERecord?id=CVE-2009-2462
nvd.nist.gov/vuln/detail/CVE-2009-2462
access.redhat.com/security/cve/CVE-2009-2463
cve.org/CVERecord?id=CVE-2009-2463
nvd.nist.gov/vuln/detail/CVE-2009-2463
access.redhat.com/security/cve/CVE-2009-2466
cve.org/CVERecord?id=CVE-2009-2466
nvd.nist.gov/vuln/detail/CVE-2009-2466
access.redhat.com/security/cve/CVE-2009-2470
cve.org/CVERecord?id=CVE-2009-2470
nvd.nist.gov/vuln/detail/CVE-2009-2470
access.redhat.com/security/cve/CVE-2009-3274
cve.org/CVERecord?id=CVE-2009-3274
nvd.nist.gov/vuln/detail/CVE-2009-3274
access.redhat.com/security/cve/CVE-2009-3376
cve.org/CVERecord?id=CVE-2009-3376
nvd.nist.gov/vuln/detail/CVE-2009-3376
access.redhat.com/security/cve/CVE-2009-3380
cve.org/CVERecord?id=CVE-2009-3380
nvd.nist.gov/vuln/detail/CVE-2009-3380
access.redhat.com/security/cve/CVE-2009-3384
bugzilla.redhat.com/show_bug.cgi?id=530164
cve.org/CVERecord?id=CVE-2009-3384
nvd.nist.gov/vuln/detail/CVE-2009-3384
access.redhat.com/security/cve/CVE-2009-3979
cve.org/CVERecord?id=CVE-2009-3979
nvd.nist.gov/vuln/detail/CVE-2009-3979
access.redhat.com/security/cve/CVE-2010-0159
cve.org/CVERecord?id=CVE-2010-0159
nvd.nist.gov/vuln/detail/CVE-2010-0159
access.redhat.com/security/cve/CVE-2010-0163
bugzilla.redhat.com/show_bug.cgi?id=576391
cve.org/CVERecord?id=CVE-2010-0163
nvd.nist.gov/vuln/detail/CVE-2010-0163
access.redhat.com/security/cve/CVE-2010-0169
bugzilla.redhat.com/show_bug.cgi?id=576694
cve.org/CVERecord?id=CVE-2010-0169
nvd.nist.gov/vuln/detail/CVE-2010-0169
access.redhat.com/security/cve/CVE-2010-0171
bugzilla.redhat.com/show_bug.cgi?id=576696
cve.org/CVERecord?id=CVE-2010-0171
nvd.nist.gov/vuln/detail/CVE-2010-0171
access.redhat.com/errata/RHSA-2010:0154
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0154.json