CVE-2009-3379 describes multiple unspecified vulnerabilities in the libvorbis library, impacting Mozilla Firefox versions 3.5.x prior to 3.5.4. This critical vulnerability has a CVSS score of 10.0, indicating a network-based attack with low complexity that could lead to a complete compromise of confidentiality, integrity, and availability, including denial of service or arbitrary code execution. Despite its high severity and a FAUCET Risk Score of 85/100, there is no evidence of active exploitation, no known exploit code in Metasploit, Nuclei, or ExploitDB, and limited community discussion or media coverage beyond a single article.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.5.1CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:* | ||
3.5.2CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:* | ||
3.5.3CPE matchmatch criteria | cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.