PT-2009-4879 · Mozilla+1 · Firefox+1

Andrej Andolsek · Published 2009-07-22 · Updated 2024-12-12 · CVE-2009-2470

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.12 Mozilla Firefox versions 3.5.x prior to 3.5.2

Description The issue allows remote SOCKS5 proxy servers to cause a denial of service, resulting in data stream corruption. This can be achieved by sending a reply with a long domain name.

Recommendations For versions prior to 3.0.12, update to version 3.0.12 or later. For versions 3.5.x prior to 3.5.2, update to version 3.5.2 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-2470

DSA-1840-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:1162

RHSA-2009:1163

RHSA-2009_1162

RHSA-2009_1163

RHSA-2010:0153

RHSA-2010:0154

RHSA-2010_0153

RHSA-2010_0154

Affected Products

Firefox

Red Hat

References · 2119

• https://bdu.fstec.ru/vul/2015-02144 · Security Note
• https://bdu.fstec.ru/vul/2015-01739 · Security Note
• https://bdu.fstec.ru/vul/2015-02145 · Security Note
• https://bdu.fstec.ru/vul/2015-02141 · Security Note
• https://bdu.fstec.ru/vul/2015-02610 · Security Note
• http://securityfocus.com/bid/35925 · Patch
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00261.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02147 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02140 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01737 · Security Note
• https://bdu.fstec.ru/vul/2015-02139 · Security Note
• http://vupen.com/english/advisories/2009/2142 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01736 · Security Note