CVE-2009-5098

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape...

5.4 MediumPublic exploit

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a refresh tag, which triggers a floating point exception.

Exploit likelihood

3.94%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 5.4

Record: CVE-2009-5098
CVSS 2.0: 5.4 MediumAV:N/AC:H/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-5098
Updated: 2026-11-02

EUVDEUVD-2009-5053 No score

Record: EUVD-2009-5053
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pmx6-78qj-835g No score

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape...

Record: GHSA-pmx6-78qj-835g
Updated: 2026-11-02

Affected products

hp palm pre webos

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Palm Pre WebOS 1.1 - Denial of Service	2009-10-14

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-5098 is a medium vulnerability (CVSS 5.4) in Hp Palm Pre Webos, published September 13, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.94%, the 90th percentile. No source names a fixed version.