CVE-2009-2404

Published: Aug 3, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.

Affected (1)

Products: Mozilla: Network Security Services

Mozilla

1 product

Network Security Services

Configuration A

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Mozilla Network Security Services	Version 3.12.3

Running on/with	Platform Versions
Aol Instant Messenger	All versions
Gnome Evolution	All versions
Mozilla Firefox	All versions
Mozilla Seamonkey	All versions
Mozilla Thunderbird	All versions
Pidgin Pidgin	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (56)

http://rhn.redhat.com/errata/RHSA-2009-1185.html

Source: secalert@redhat.com

http://secunia.com/advisories/36088

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36102

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36125

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36139

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36157

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36434

Source: secalert@redhat.com

http://secunia.com/advisories/37098

Source: secalert@redhat.com

http://secunia.com/advisories/39428

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1

Source: secalert@redhat.com

http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1874

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:197

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:216

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2009/mfsa2009-43.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2009_48_firefox.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-1207.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/35891

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-810-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA10-103B.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2009/2085

Source: secalert@redhat.com

PatchVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=512912

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658

Source: secalert@redhat.com

https://usn.ubuntu.com/810-2/

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2009-1185.html