CVE-2009-2466

CVE Descriptions

The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-787	Out-of-bounds Write The product writes data past the end, or before the beginning, of the intended buffer.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	10		AV:N/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	8.23%	–	–
2022-03-13	–	–	8.23%	–	–
2022-04-03	–	–	8.23%	–	–
2023-03-12	–	–	–	56.23%	–
2023-07-30	–	–	–	48.6%	–
2023-10-29	–	–	–	42.99%	–
2024-03-03	–	–	–	47.59%	–
2024-06-02	–	–	–	47.59%	–
2024-08-04	–	–	–	50.76%	–
2024-12-22	–	–	–	15.44%	–
2025-01-19	–	–	–	15.44%	–
2025-03-18	–	–	–	–	5.7%
2025-03-30	–	–	–	–	5.7%
2025-04-06	–	–	–	–	6.78%
2025-04-15	–	–	–	–	6.78%
2025-06-26	–	–	–	–	4.98%
2025-06-26	–	–	–	–	4.98,%

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Date	Percentile
2022-02-06	82%
2022-03-13	83%
2022-04-03	93%
2023-03-12	97%
2023-07-30	97%
2023-10-29	97%
2024-03-03	97%
2024-06-02	97%
2024-08-04	98%
2024-12-22	96%
2025-01-19	96%
2025-03-18	9%
2025-03-30	89%
2025-04-06	9%
2025-04-15	91%
2025-06-26	89%
2025-06-26	89%

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version To (excluding) 3.0.12

Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version 0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 0.6.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 0.7.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.2 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.3 (Open CPE detail)
Mozilla>>Firefox >> Version 0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 0.10.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.4.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.12 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.8 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.12 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.13 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.14 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.15 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.16 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.17 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.18 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.19 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.20 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.11 (Open CPE detail)

Mozilla>>Thunderbird >> Version To (including) 3.0.11

Mozilla>>Thunderbird >> Version - (Open CPE detail)
Mozilla>>Thunderbird >> Version - (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.3 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7.3 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.10 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.12 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.13 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.14 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.12 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.14 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.16 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.17 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.18 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.19 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.21 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.22 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.23 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.24 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.14 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.3 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.10 (Open CPE detail)
Mozilla>>Thunderbird >> Version 3.0.11 (Open CPE detail)

References

http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1
Tags : vendor-advisory, x_refsource_SUNALERT

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9820
Tags : vdb-entry, signature, x_refsource_OVAL

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.redhat.com/support/errata/RHSA-2010-0153.html
Tags : vendor-advisory, x_refsource_REDHAT

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/36145
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/35944
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2010/0650
Tags : vdb-entry, x_refsource_VUPEN

https://bugzilla.mozilla.org/show_bug.cgi?id=493281
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/35943
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html
Tags : vendor-advisory, x_refsource_SUSE

http://rhn.redhat.com/errata/RHSA-2009-1162.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.mozilla.org/security/announce/2009/mfsa2009-34.html
Tags : x_refsource_CONFIRM

https://bugzilla.mozilla.org/show_bug.cgi?id=465980
Tags : x_refsource_CONFIRM

http://www.redhat.com/support/errata/RHSA-2010-0154.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.securityfocus.com/bid/35758
Tags : vdb-entry, x_refsource_BID

http://www.vupen.com/english/advisories/2009/2152
Tags : vdb-entry, x_refsource_VUPEN

https://bugzilla.mozilla.org/show_bug.cgi?id=454704
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/36005
Tags : third-party-advisory, x_refsource_SECUNIA

http://rhn.redhat.com/errata/RHSA-2009-1163.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/35947
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

https://bugzilla.mozilla.org/show_bug.cgi?id=494445
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/35914
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/1972
Tags : vdb-entry, x_refsource_VUPEN

CVE-2009-2466 : Detail