CVE-2009-3381: Critical severity firefox vulnerability

Published Oct 29, 2009

Updated

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Affected Software

3 affected components

Mozilla Firefox=3.5.3

Mozilla Firefox=3.5.1

Mozilla Firefox=3.5.2

Remediation

Patch Available

http://www.mozilla.org/security/announce/2009/mfsa2009-64.html

Event History

Oct 29, 2009

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3381?

CVE-2009-3381 is classified as a critical vulnerability due to its potential to lead to application crashes and arbitrary code execution.

How do I fix CVE-2009-3381?

To fix CVE-2009-3381, update Mozilla Firefox to version 3.5.4 or later as soon as possible.

What versions of Firefox are affected by CVE-2009-3381?

CVE-2009-3381 affects Mozilla Firefox versions 3.5.1, 3.5.2, and 3.5.3.

What types of attacks can exploit CVE-2009-3381?

CVE-2009-3381 can be exploited to cause denial of service through memory corruption and potentially execute arbitrary code.

Is there a known fix for CVE-2009-3381?

Yes, the fix for CVE-2009-3381 involves updating to a patched version of Mozilla Firefox, specifically version 3.5.4 or newer.