CVE-2009-3981
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey...
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
9.3
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2009-3981- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2009-3981- Updated
- 2026-11-02
EUVDEUVD-2009-3952 No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2009-3952- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3rf9-fc8c-hj8h No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey...
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-3rf9-fc8c-hj8h- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 6 CVEs |
before 1.9.0.16-1, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 13 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.16-1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3981 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published December 16, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.72%, the 89th percentile. No source names a fixed version.
References
secunia.com/advisories/37704
secunia.com/advisories/37699
bugzilla.mozilla.org/show_bug.cgi?id=468771
vupen.com/english/advisories/2009/3547
secunia.com/advisories/37881
secunia.com/advisories/37785
Show 42 moreShow less
securitytracker.com/id?1023333
secunia.com/advisories/37813
ubuntu.com/usn/USN-873-1
securityfocus.com/bid/37363
exchange.xforce.ibmcloud.com/vulnerabilities/54801
securityfocus.com/bid/37349
rhn.redhat.com/errata/RHSA-2009-1674.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8584
debian.org/security/2009/dsa-1956
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8523
mozilla.org/security/announce/2009/mfsa2009-65.html
securitytracker.com/id?1023334
novell.com/linux/security/advisories/2009_63_firefox.html
bugzilla.redhat.com/show_bug.cgi?id=546713
nvd.nist.gov/vuln/detail/CVE-2009-3981
github.com/advisories/GHSA-3rf9-fc8c-hj8h
access.redhat.com/errata/RHSA-2009:1674
redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefox30.html
bugzilla.redhat.com/show_bug.cgi?id=546694
bugzilla.redhat.com/show_bug.cgi?id=546720
bugzilla.redhat.com/show_bug.cgi?id=546722
bugzilla.redhat.com/show_bug.cgi?id=546724
bugzilla.redhat.com/show_bug.cgi?id=546726
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1674.json
access.redhat.com/security/cve/CVE-2009-3979
cve.org/CVERecord?id=CVE-2009-3979
nvd.nist.gov/vuln/detail/CVE-2009-3979
access.redhat.com/security/cve/CVE-2009-3981
cve.org/CVERecord?id=CVE-2009-3981
access.redhat.com/security/cve/CVE-2009-3983
cve.org/CVERecord?id=CVE-2009-3983
nvd.nist.gov/vuln/detail/CVE-2009-3983
access.redhat.com/security/cve/CVE-2009-3984
cve.org/CVERecord?id=CVE-2009-3984
nvd.nist.gov/vuln/detail/CVE-2009-3984
access.redhat.com/security/cve/CVE-2009-3985
cve.org/CVERecord?id=CVE-2009-3985
nvd.nist.gov/vuln/detail/CVE-2009-3985
access.redhat.com/security/cve/CVE-2009-3986
cve.org/CVERecord?id=CVE-2009-3986
nvd.nist.gov/vuln/detail/CVE-2009-3986