NVD

Id
49651  
Name
CVE-2009-2404  
Description
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject"s Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-03  
Modified Date
2012-10-22  
Seq
2009-2404  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250827 49651 CVE-2009-2404 oval:org.mitre.oval:def:11174  View
250828 49651 CVE-2009-2404 oval:org.mitre.oval:def:8658  View
250829 49651 CVE-2009-2404 RHSA-2009:1185  View
250830 49651 CVE-2009-2404 273910  View
250831 49651 CVE-2009-2404 1021030  View
250832 49651 CVE-2009-2404 1021699  View
250833 49651 CVE-2009-2404 http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf  View
250834 49651 CVE-2009-2404 DSA-1874  View
250835 49651 CVE-2009-2404 MDVSA-2009:197  View
250836 49651 CVE-2009-2404 MDVSA-2009:216  View
250837 49651 CVE-2009-2404 http://www.mozilla.org/security/announce/2009/mfsa2009-43.html  View
250838 49651 CVE-2009-2404 SUSE-SA:2009:048  View
250839 49651 CVE-2009-2404 http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html  View
250840 49651 CVE-2009-2404 RHSA-2009:1207  View
250841 49651 CVE-2009-2404 35891  View
250842 49651 CVE-2009-2404 USN-810-1  View
250843 49651 CVE-2009-2404 USN-810-2  View
250844 49651 CVE-2009-2404 TA10-103B  View
250845 49651 CVE-2009-2404 ADV-2009-2085  View
250846 49651 CVE-2009-2404 https://bugzilla.redhat.com/show_bug.cgi?id=512912  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40949 JVNDB-2009-001955 Mozilla NSS の正規表現の解析における任意のコードを実行される脆弱性 Firefox などで使用されている Mozilla Network Security Services (NSS) の正規表現の解析には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-2404 39835 CVE-2009-2404 49651 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001955.html 2009-08-01 2011-05-09 View