Unscored DSA-1873-1 3 CVEs

xulrunner - spoofing vulnerabilities

Published Aug 26, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	xulrunner	1.9.0.13-0lenny1

Vulnerabilities 3

Unscored —

CVE-2009-2654 Public exploit

Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly c…

Aug 3, 2009
Unscored —

CVE-2009-2662

The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory c…

Aug 4, 2009
Unscored —

CVE-2009-2664

The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remot…

Aug 4, 2009