{"id":"CVE-2009-0774","url":"https://www.cyber-defence.io/tools/cve/CVE-2009-0774","generatedAt":"2026-10-27T18:33:24.172Z","title":"The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different…","description":"The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.","published":"2009-03-05T02:30:00.000Z","lastModified":"2026-06-16T23:05:47.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-399"],"affected":["mozilla/firefox","mozilla/seamonkey","mozilla/thunderbird"],"epss":{"score":0.04047,"percentile":0.9056,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (4.05%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34137","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34140","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34145","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34272","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34383","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34387","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34417","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34462","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34464","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34527","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0258.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0315.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0325.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33990","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021795","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0632","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=473709","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/741-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-07.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0774","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}