PT-2009-4879 · Mozilla+1 · Firefox+1

Andrej Andolsek · Publicado 2009-07-22 · Atualizado 2024-12-12 · CVE-2009-2470

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.12 Mozilla Firefox versions 3.5.x prior to 3.5.2

Description The issue allows remote SOCKS5 proxy servers to cause a denial of service, resulting in data stream corruption. This can be achieved by sending a reply with a long domain name.

Recommendations For versions prior to 3.0.12, update to version 3.0.12 or later. For versions 3.5.x prior to 3.5.2, update to version 3.5.2 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-2470

DSA-1840-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:1162

RHSA-2009:1163

RHSA-2009_1162

RHSA-2009_1163

RHSA-2010:0153

RHSA-2010:0154

RHSA-2010_0153

RHSA-2010_0154

Produtos afetados

Firefox

Red Hat

Referências · 2119

• https://github.com/Fullmetal5/str2hax · Nota
• https://suse.com/security/cve/CVE-2009-0354 · Nota
• https://suse.com/security/cve/CVE-2024-3302 · Nota
• https://suse.com/security/cve/CVE-2024-1551 · Nota
• https://suse.com/security/cve/CVE-2012-1937 · Nota
• https://suse.com/security/cve/CVE-2023-25731 · Nota
• https://suse.com/security/cve/CVE-2009-1307 · Nota
• https://suse.com/security/cve/CVE-2020-6812 · Nota
• https://suse.com/security/cve/CVE-2024-4769 · Nota
• https://suse.com/security/cve/CVE-2016-5282 · Nota
• https://suse.com/security/cve/CVE-2010-1210 · Nota
• https://suse.com/security/cve/CVE-2009-3381 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3380 · Nota
• https://suse.com/security/cve/CVE-2016-2798 · Nota
• https://suse.com/security/cve/CVE-2023-23601 · Nota