CVE-2009-3376

CVE-2009-3376 is a critical vulnerability affecting Mozilla Firefox and SeaMonkey browsers, allowing remote attackers to spoof file extensions in downloaded files. By leveraging a right-to-left override Unicode character, an attacker could present a seemingly safe file extension (e.g., .txt) while the actual file is an executable, tricking users into running malicious code. This vulnerability carries a high CVSS score of 9.3, indicating a severe risk with network-based attacks, medium complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness of its potential impact.