{"id":"CVE-2009-3373","state":"PUBLISHED","title":"Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary c","description":"Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.","publishedAt":"2009-10-29T14:00:00.000Z","updatedAt":"2024-08-07T06:22:24.427Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684","http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","http://www.mozilla.org/security/announce/2009/mfsa2009-56.html","https://bugzilla.mozilla.org/show_bug.cgi?id=511689","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548","http://www.vupen.com/english/advisories/2009/3334","http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:23.319Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2009/3xxx/CVE-2009-3373.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2009-3373","state":"PUBLISHED","datePublished":"2009-10-29T14:00:00.000Z","dateUpdated":"2024-08-07T06:22:24.427Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2009-09-24T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684","name":"oval:org.mitre.oval:def:10684","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","name":"272909","tags":["vendor-advisory","x_refsource_SUNALERT"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-56.html","tags":["x_refsource_CONFIRM"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511689","tags":["x_refsource_CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548","name":"oval:org.mitre.oval:def:6548","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","name":"ADV-2009-3334","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","name":"MDVSA-2009:294","tags":["vendor-advisory","x_refsource_MANDRIVA"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2009-10-27T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-3373","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"oval:org.mitre.oval:def:10684","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684"},{"name":"272909","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1"},{"name":"http://www.mozilla.org/security/announce/2009/mfsa2009-56.html","refsource":"CONFIRM","url":"http://www.mozilla.org/security/announce/2009/mfsa2009-56.html"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=511689","refsource":"CONFIRM","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511689"},{"name":"oval:org.mitre.oval:def:6548","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548"},{"name":"ADV-2009-3334","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/3334"},{"name":"MDVSA-2009:294","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10684","name":"oval:org.mitre.oval:def:10684","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1","name":"272909","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"]},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-56.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=511689","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6548","name":"oval:org.mitre.oval:def:6548","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/3334","name":"ADV-2009-3334","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:294","name":"MDVSA-2009:294","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T06:22:24.427Z"}}]}}}