CVE-2009-1232

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

5.47% chance of exploitation in the next 30 days, 92th percentile

Published

2009-04-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://milw0rm.com/sploits/2009-Firefox-XUL-0day-PoC.rar

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/8306

References

• CVE Record
• NVD entry

Related

• CVE-2009-1230
• CVE-2009-1233
• CVE-2009-1229
• CVE-2009-1234
• CVE-2009-1228
• CVE-2009-1235