CVE-2009-3981
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey...
CVE-2009-3981 is a high vulnerability (CVSS 9.3) in Mozilla Firefox, published December 16, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.72%, the 89th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 3.72%EPSS, 89th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xulrunnerDebian:5.0 From an advisory covering 6 CVEs | before 1.9.0.16-1, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 13 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 | 1.9.0.16-1 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:3.0.16-4.el4 | 0:3.0.16-4.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:3.0.16-1.el5_4 | 0:3.0.16-1.el5_4 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
xulrunner-devel-unstableRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:1.9.0.16-2.el5_4 | 0:1.9.0.16-2.el5_4 |
What each source reports
NVD Score used
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2009-3981- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2009-3981- Updated
- 2026-11-02
EUVDEUVD-2009-3952No score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2009-3952- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3rf9-fc8c-hj8hNo score
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey...
Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-3rf9-fc8c-hj8h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/37704
bugzilla.mozilla.org/show_bug.cgi?id=468771
vupen.com/english/advisories/2009/3547
Show 42 moreShow less
securitytracker.com/id?1023333
ubuntu.com/usn/USN-873-1
securityfocus.com/bid/37363
exchange.xforce.ibmcloud.com/vulnerabilities/54801
rhn.redhat.com/errata/RHSA-2009-1674.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8584
debian.org/security/2009/dsa-1956
mozilla.org/security/announce/2009/mfsa2009-65.html
novell.com/linux/security/advisories/2009_63_firefox.html
bugzilla.redhat.com/show_bug.cgi?id=546713
nvd.nist.gov/vuln/detail/CVE-2009-3981
github.com/advisories/GHSA-3rf9-fc8c-hj8h
access.redhat.com/errata/RHSA-2009:1674
redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1674.json
cve.org/CVERecord?id=CVE-2009-3979