VULNERABILITY INTELLIGENCE

CVE-2009-1571

CVSS score10 HIGH
EPSS probability6.51%
CISA KEVNot currently listed
Published2010-02-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references