CVE-2009-1232 describes a denial of service vulnerability affecting Mozilla Firefox versions 3.0.10 and earlier. This flaw allows remote attackers to trigger memory corruption by presenting a malformed XML document containing numerous unclosed start-tags. The attack requires user interaction (e.g., visiting a malicious webpage) and results in a low-impact denial of service, with no compromise of confidentiality or integrity. While not actively exploited in the wild, proof-of-concept exploit code is publicly available, though the vulnerability has garnered minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.0CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:* | ||
3.0.1CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.