CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3376

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.03

EPSS Ranking 86.0%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2009-3376

Mozilla » Firefox » Version: 3.0

cpe:2.3:a:mozilla:firefox:3.0
Mozilla » Firefox » Version: 3.0.1

cpe:2.3:a:mozilla:firefox:3.0.1
Mozilla » Firefox » Version: 3.0.10

cpe:2.3:a:mozilla:firefox:3.0.10
Mozilla » Firefox » Version: 3.0.11

cpe:2.3:a:mozilla:firefox:3.0.11
Mozilla » Firefox » Version: 3.0.12

cpe:2.3:a:mozilla:firefox:3.0.12
Mozilla » Firefox » Version: 3.0.13

cpe:2.3:a:mozilla:firefox:3.0.13
Mozilla » Firefox » Version: 3.0.2

cpe:2.3:a:mozilla:firefox:3.0.2
Mozilla » Firefox » Version: 3.0.3

cpe:2.3:a:mozilla:firefox:3.0.3
Mozilla » Firefox » Version: 3.0.4

cpe:2.3:a:mozilla:firefox:3.0.4
Mozilla » Firefox » Version: 3.0.5

cpe:2.3:a:mozilla:firefox:3.0.5
Mozilla » Firefox » Version: 3.0.6

cpe:2.3:a:mozilla:firefox:3.0.6
Mozilla » Firefox » Version: 3.0.7

cpe:2.3:a:mozilla:firefox:3.0.7
Mozilla » Firefox » Version: 3.0.8

cpe:2.3:a:mozilla:firefox:3.0.8
Mozilla » Firefox » Version: 3.0.9

cpe:2.3:a:mozilla:firefox:3.0.9
Mozilla » Firefox » Version: 3.5.1

cpe:2.3:a:mozilla:firefox:3.5.1
Mozilla » Firefox » Version: 3.5.2

cpe:2.3:a:mozilla:firefox:3.5.2
Mozilla » Firefox » Version: 3.5.3

cpe:2.3:a:mozilla:firefox:3.5.3
Mozilla » Seamonkey » Version: N/A

cpe:2.3:a:mozilla:seamonkey:-
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Seamonkey » Version: 1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8
Mozilla » Seamonkey » Version: 1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9
Mozilla » Seamonkey » Version: 1.1

cpe:2.3:a:mozilla:seamonkey:1.1
Mozilla » Seamonkey » Version: 1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1
Mozilla » Seamonkey » Version: 1.1.10

cpe:2.3:a:mozilla:seamonkey:1.1.10
Mozilla » Seamonkey » Version: 1.1.11

cpe:2.3:a:mozilla:seamonkey:1.1.11
Mozilla » Seamonkey » Version: 1.1.12

cpe:2.3:a:mozilla:seamonkey:1.1.12
Mozilla » Seamonkey » Version: 1.1.13

cpe:2.3:a:mozilla:seamonkey:1.1.13
Mozilla » Seamonkey » Version: 1.1.14

cpe:2.3:a:mozilla:seamonkey:1.1.14
Mozilla » Seamonkey » Version: 1.1.15

cpe:2.3:a:mozilla:seamonkey:1.1.15
Mozilla » Seamonkey » Version: 1.1.16

cpe:2.3:a:mozilla:seamonkey:1.1.16
Mozilla » Seamonkey » Version: 1.1.17

cpe:2.3:a:mozilla:seamonkey:1.1.17
Mozilla » Seamonkey » Version: 1.1.18

cpe:2.3:a:mozilla:seamonkey:1.1.18
Mozilla » Seamonkey » Version: 1.1.19

cpe:2.3:a:mozilla:seamonkey:1.1.19
Mozilla » Seamonkey » Version: 1.1.2

cpe:2.3:a:mozilla:seamonkey:1.1.2
Mozilla » Seamonkey » Version: 1.1.3

cpe:2.3:a:mozilla:seamonkey:1.1.3
Mozilla » Seamonkey » Version: 1.1.4

cpe:2.3:a:mozilla:seamonkey:1.1.4
Mozilla » Seamonkey » Version: 1.1.5

cpe:2.3:a:mozilla:seamonkey:1.1.5
Mozilla » Seamonkey » Version: 1.1.6

cpe:2.3:a:mozilla:seamonkey:1.1.6
Mozilla » Seamonkey » Version: 1.1.7

cpe:2.3:a:mozilla:seamonkey:1.1.7
Mozilla » Seamonkey » Version: 1.1.8

cpe:2.3:a:mozilla:seamonkey:1.1.8
Mozilla » Seamonkey » Version: 1.1.9

cpe:2.3:a:mozilla:seamonkey:1.1.9
Mozilla » Seamonkey » Version: 1.5.0.10

cpe:2.3:a:mozilla:seamonkey:1.5.0.10
Mozilla » Seamonkey » Version: 1.5.0.8

cpe:2.3:a:mozilla:seamonkey:1.5.0.8
Mozilla » Seamonkey » Version: 1.5.0.9

cpe:2.3:a:mozilla:seamonkey:1.5.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3376

Products

Pricing

Contact Us