CVE-2009-3373

Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

15.52% chance of exploitation in the next 30 days, 97th percentile

Published

2009-10-29

Updated

2024-08-07

Proof-of-concept exploits (1)

• rakwaht/FirefoxExploits1★ · 2015-11-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33313

Security advisories

• http://www.mozilla.org/security/announce/2009/mfsa2009-56.html
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:294

References

• CVE Record
• NVD entry

Related

• CVE-2011-3659