Every CVE Search/ Get API key

CVE-2009-0689

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...

6.8 MediumPublic exploitFix available

CVE-2009-0689 is a medium vulnerability (CVSS 6.8) in Freebsd, published July 1, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 29.4%, the 98th percentile. Fixed in mono 4.2.1.102+dfsg2-4.

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Exploit likelihood

29.4%Down 16.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Record
CVE-2009-0689
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Record
CVE-2009-0689
Updated
2026-11-02
EUVDEUVD-2009-0689 No score

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Record
EUVD-2009-0689
Updated
2026-11-03
GitHub AdvisoriesGHSA-99jp-rppc-jgcm No score

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Record
GHSA-99jp-rppc-jgcm
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Record
CVE-2009-0689
Updated
2026-11-02
OSVDEBIAN-CVE-2009-0689 No score

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Record
DEBIAN-CVE-2009-0689
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2016-0013 No score

Updated mono packages fix security vulnerability

It was found that float-parsing code used in Mono before 4.2 is derived from code vulnerable to CVE-2009-0689. The issue concerns the 'freelist' array, which is a global array of 16 pointers to 'Bigint'. This array is part of a memory allocation and reuse system which attempts to reduce the number of 'malloc' and 'free' calls. The system allocates blocks in power-of-two sizes, from 2^0 through 2^15, and stores freed blocks of each size in a linked list rooted at the corresponding cell of 'freelist'. The 'Balloc' and 'Bfree' functions which operate this system fail to check if the size parameter 'k' is within the allocated 0..15 range. As a result, a sufficiently large allocation will have k=16 and treat the word immediately after 'freelist' as a pointer to a previously-allocated chunk. The specific results may vary significantly based on the version, platform, and compiler, since they depend on the layout of variables in memory. An attacker who can cause a carefully-chosen string to be converted to a floating-point number can cause a crash and potentially induce arbitrary code execution.

Record
MGASA-2016-0013
Updated
2026-11-02
OSVopenSUSE-SU-2024:10394-1 No score

kdelibs3-3.5.10-89.3 on GA media

These are all security issues fixed in the kdelibs3-3.5.10-89.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10394-1
Updated
2026-11-02
OSVSUSE-SU-2016:0257-1 No score

Security update for mono-core

mono-core was updated to fix the following vulnerabilities:

  • CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation (bsc#958097)
  • CVE-2012-3543: Remote attackers could cause a denial of service through increased CPU consumption due to lack of protection against predictable hash collisions when processing form parameters (bsc#739119)
Record
SUSE-SU-2016:0257-1
Updated
2026-11-02
OSVSUSE-SU-2016:2958-1 No score

Security update for mono-core

mono-core was updated to fix the following vulnerabilities:

  • CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation. (bsc#958097)
  • CVE-2012-3543: Remote attackers could cause a denial of service through increased CPU consumption due to lack of protection against predictable hash collisions when processing form parameters. (bsc#739119)
Record
SUSE-SU-2016:2958-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mono
Debian:12
before 4.2.1.102+dfsg2-4
4.2.1.102+dfsg2-4
mono
Debian:13
before 4.2.1.102+dfsg2-4
4.2.1.102+dfsg2-4
mono
Debian:14
before 4.2.1.102+dfsg2-4
4.2.1.102+dfsg2-4
nspr
Debian:12
before 4.8-2
4.8-2
nspr
Debian:13
before 4.8-2
4.8-2
nspr
Debian:14
before 4.8-2
4.8-2
mono
Debian:8
before 3.2.8+dfsg-10+deb8u1, plus listed versions
3.2.8+dfsg-10
3.2.8+dfsg-10+deb8u1
mono
Debian:6.0
before 2.6.7-5.1+deb6u2, plus listed versions
2.6.7-52.6.7-5+s390x2.6.7-5.1
2.6.7-5.1+deb6u2
nspr
Debian:5.0
before 4.7.1-5, plus listed versions
4.7.1-4
4.7.1-5
kdelibs
Debian:5.0
before 4:3.5.10.dfsg.1-0lenny4, plus listed versions
4:3.5.10.dfsg.1-0lenny14:3.5.10.dfsg.1-0lenny24:3.5.10.dfsg.1-0lenny3
4:3.5.10.dfsg.1-0lenny4
Show 262 moreShow less
Affected packages
PackageAffectedFixed
mono
Mageia:5
before 3.12.1-1.2.mga5
3.12.1-1.2.mga5
firefox
Red Hat:enterprise_linux:4::as
before 0:3.0.15-3.el4
0:3.0.15-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::as
before 0:3.0.15-3.el4
0:3.0.15-3.el4
nspr
Red Hat:enterprise_linux:4::as
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-debuginfo
Red Hat:enterprise_linux:4::as
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-devel
Red Hat:enterprise_linux:4::as
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
firefox
Red Hat:enterprise_linux:4::desktop
before 0:3.0.15-3.el4
0:3.0.15-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:3.0.15-3.el4
0:3.0.15-3.el4
nspr
Red Hat:enterprise_linux:4::desktop
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-devel
Red Hat:enterprise_linux:4::desktop
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
firefox
Red Hat:enterprise_linux:4::es
before 0:3.0.15-3.el4
0:3.0.15-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::es
before 0:3.0.15-3.el4
0:3.0.15-3.el4
nspr
Red Hat:enterprise_linux:4::es
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-debuginfo
Red Hat:enterprise_linux:4::es
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-devel
Red Hat:enterprise_linux:4::es
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
firefox
Red Hat:enterprise_linux:4::ws
before 0:3.0.15-3.el4
0:3.0.15-3.el4
firefox-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:3.0.15-3.el4
0:3.0.15-3.el4
nspr
Red Hat:enterprise_linux:4::ws
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr-devel
Red Hat:enterprise_linux:4::ws
before 0:4.7.6-1.el4_8
0:4.7.6-1.el4_8
nspr
Red Hat:enterprise_linux:5::client_workstation
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
nspr-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
nspr-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
xulrunner
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-devel-unstable
Red Hat:enterprise_linux:5::client_workstation
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
firefox
Red Hat:enterprise_linux:5::client
before 0:3.0.15-3.el5_4
0:3.0.15-3.el5_4
firefox-debuginfo
Red Hat:enterprise_linux:5::client
before 0:3.0.15-3.el5_4
0:3.0.15-3.el5_4
nspr
Red Hat:enterprise_linux:5::client
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
nspr-debuginfo
Red Hat:enterprise_linux:5::client
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
xulrunner
Red Hat:enterprise_linux:5::client
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-debuginfo
Red Hat:enterprise_linux:5::client
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
firefox
Red Hat:enterprise_linux:5::server
before 0:3.0.15-3.el5_4
0:3.0.15-3.el5_4
firefox-debuginfo
Red Hat:enterprise_linux:5::server
before 0:3.0.15-3.el5_4
0:3.0.15-3.el5_4
nspr
Red Hat:enterprise_linux:5::server
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
nspr-debuginfo
Red Hat:enterprise_linux:5::server
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
nspr-devel
Red Hat:enterprise_linux:5::server
before 0:4.7.6-1.el5_4
0:4.7.6-1.el5_4
xulrunner
Red Hat:enterprise_linux:5::server
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-debuginfo
Red Hat:enterprise_linux:5::server
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-devel
Red Hat:enterprise_linux:5::server
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
xulrunner-devel-unstable
Red Hat:enterprise_linux:5::server
before 0:1.9.0.15-3.el5_4
0:1.9.0.15-3.el5_4
seamonkey
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-chat
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-mail
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::as
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-chat
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-mail
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::desktop
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-chat
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-mail
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::es
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-chat
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-dom-inspector
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-js-debugger
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-mail
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nspr-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey-nss-devel
Red Hat:enterprise_linux:3::ws
before 0:1.0.9-0.47.el3
0:1.0.9-0.47.el3
seamonkey
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::as
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::desktop
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::es
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-chat
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-devel
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-dom-inspector
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-js-debugger
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
seamonkey-mail
Red Hat:enterprise_linux:4::ws
before 0:1.0.9-50.el4_8
0:1.0.9-50.el4_8
kdelibs
Red Hat:enterprise_linux:4::as
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-debuginfo
Red Hat:enterprise_linux:4::as
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-devel
Red Hat:enterprise_linux:4::as
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs
Red Hat:enterprise_linux:4::desktop
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-debuginfo
Red Hat:enterprise_linux:4::desktop
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-devel
Red Hat:enterprise_linux:4::desktop
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs
Red Hat:enterprise_linux:4::es
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-debuginfo
Red Hat:enterprise_linux:4::es
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-devel
Red Hat:enterprise_linux:4::es
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs
Red Hat:enterprise_linux:4::ws
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-debuginfo
Red Hat:enterprise_linux:4::ws
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs-devel
Red Hat:enterprise_linux:4::ws
before 6:3.3.1-17.el4_8.1
6:3.3.1-17.el4_8.1
kdelibs
Red Hat:enterprise_linux:5::client_workstation
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-devel
Red Hat:enterprise_linux:5::client_workstation
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs
Red Hat:enterprise_linux:5::client
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-apidocs
Red Hat:enterprise_linux:5::client
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-debuginfo
Red Hat:enterprise_linux:5::client
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs
Red Hat:enterprise_linux:5::server
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-apidocs
Red Hat:enterprise_linux:5::server
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-debuginfo
Red Hat:enterprise_linux:5::server
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
kdelibs-devel
Red Hat:enterprise_linux:5::server
before 6:3.5.4-25.el5_4.1
6:3.5.4-25.el5_4.1
thunderbird
Red Hat:enterprise_linux:5::client
before 0:2.0.0.24-2.el5_4
0:2.0.0.24-2.el5_4
thunderbird-debuginfo
Red Hat:enterprise_linux:5::client
before 0:2.0.0.24-2.el5_4
0:2.0.0.24-2.el5_4
thunderbird
Red Hat:rhel_productivity:5
before 0:2.0.0.24-2.el5_4
0:2.0.0.24-2.el5_4
thunderbird-debuginfo
Red Hat:rhel_productivity:5
before 0:2.0.0.24-2.el5_4
0:2.0.0.24-2.el5_4
thunderbird
Red Hat:enterprise_linux:4::as
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::as
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird
Red Hat:enterprise_linux:4::desktop
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird
Red Hat:enterprise_linux:4::es
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::es
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird
Red Hat:enterprise_linux:4::ws
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
thunderbird-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:1.5.0.12-25.el4
0:1.5.0.12-25.el4
php
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-bcmath
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-cli
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-common
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-dba
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-gd
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-imap
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ldap
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mbstring
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mysql
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ncurses
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-odbc
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pdo
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pgsql
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-snmp
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-soap
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xml
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xmlrpc
Red Hat:enterprise_linux:5::client_workstation
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-bcmath
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-cli
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-common
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-dba
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-debuginfo
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-devel
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-gd
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-imap
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ldap
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mbstring
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-mysql
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-ncurses
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-odbc
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pdo
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-pgsql
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-snmp
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-soap
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xml
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php-xmlrpc
Red Hat:enterprise_linux:5::server
before 0:5.1.6-44.el5_10
0:5.1.6-44.el5_10
php
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-bcmath
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-cli
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-common
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-dba
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-debuginfo
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-devel
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-gd
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-imap
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-ldap
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-mbstring
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-mysql
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-ncurses
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-odbc
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-pdo
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-pgsql
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-snmp
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-soap
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-xml
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php-xmlrpc
Red Hat:rhel_mission_critical:5.3
before 0:5.1.6-23.6.el5_3
0:5.1.6-23.6.el5_3
php
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-bcmath
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-cli
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-common
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-dba
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-debuginfo
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-devel
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-gd
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-imap
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-ldap
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-mbstring
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-mysql
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-ncurses
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-odbc
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-pdo
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-pgsql
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-snmp
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-soap
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-xml
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php-xmlrpc
Red Hat:rhel_mission_critical:5.6
before 0:5.1.6-27.el5_6.7
0:5.1.6-27.el5_6.7
php
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-bcmath
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-cli
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-common
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-dba
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-debuginfo
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-devel
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-gd
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-imap
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-ldap
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-mbstring
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-mysql
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-ncurses
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-odbc
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-pdo
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-pgsql
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-snmp
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-soap
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-xml
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
php-xmlrpc
Red Hat:rhel_eus:5.9
before 0:5.1.6-40.el5_9.2
0:5.1.6-40.el5_9.2
mono-core
SUSE:Linux Enterprise Software Development Kit 11 SP3
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Software Development Kit 11 SP4
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Desktop 11 SP4
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Server 11 SP3
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Server 11 SP3-TERADATA
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Server 11 SP4
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
before 2.6.7-0.16.1
2.6.7-0.16.1
mono-core
SUSE:Linux Enterprise Software Development Kit 11 SP4
before 2.6.7-0.18.1
2.6.7-0.18.1
mono-core
SUSE:Linux Enterprise Server 11 SP3-LTSS
before 2.6.7-0.18.1
2.6.7-0.18.1
mono-core
SUSE:Linux Enterprise Server 11 SP3-TERADATA
before 2.6.7-0.18.1
2.6.7-0.18.1
mono-core
SUSE:Linux Enterprise Server 11 SP4
before 2.6.7-0.18.1
2.6.7-0.18.1
mono-core
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
before 2.6.7-0.18.1
2.6.7-0.18.1

Public exploits

Links only. Every CVE stores no exploit code.

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

References

Show 191 moreShow less
MoveEnter Open