[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faW2gPpx72xRI8nT_C8P6hcbvR4VmvbzwhhjcPDXRjB4":3,"g5a-risk:CVE-2009-2404":282},{"success":4,"data":5,"meta":280},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":64,"references":65,"referencesCount":211,"weaknesses":212,"weaknessesCount":221,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":222,"seoMetadata":223,"configurations":248,"relatedVendorCves":271,"notableEvents":272},"CVE-2009-2404","What is CVE-2009-2404?","Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.","Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonke...","2009-08-03T14:30:00.61","2026-06-16T23:09:22.32",9.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":4,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","COMPLETE","",null,"HIGH",8.6,10,false,[],0.04155,[34,34,34,34,34,34,34],"Critical",[38,43,48,52,55,58,61],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"mozilla","network_security_services","3.12.3","cpe:2.3:a:mozilla:network_security_services:3.12.3:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":32},"aol","instant_messenger","*","cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":32},"gnome","evolution","cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":46,"criteria":54,"vulnerable":32},"firefox","cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",{"vendor":39,"product":56,"version":46,"criteria":57,"vulnerable":32},"seamonkey","cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*",{"vendor":39,"product":59,"version":46,"criteria":60,"vulnerable":32},"thunderbird","cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",{"vendor":62,"product":62,"version":46,"criteria":63,"vulnerable":32},"pidgin","cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*",7,[66,70,75,78,81,84,87,90,93,96,100,103,106,110,114,118,121,126,130,134,137,141,145,150,154,157,161,164,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209],{"url":67,"source":68,"tags":69},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2009-1185.html","Red Hat",[],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36088","Secunia",[74],"Vendor Advisory",{"url":76,"source":72,"tags":77},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36102",[74],{"url":79,"source":72,"tags":80},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36125",[74],{"url":82,"source":72,"tags":83},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36139",[74],{"url":85,"source":72,"tags":86},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36157",[74],{"url":88,"source":72,"tags":89},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36434",[],{"url":91,"source":72,"tags":92},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F37098",[],{"url":94,"source":72,"tags":95},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F39428",[],{"url":97,"source":98,"tags":99},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-66-273910-1","Sun",[],{"url":101,"source":98,"tags":102},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-77-1021030.1-1",[],{"url":104,"source":98,"tags":105},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-77-1021699.1-1",[],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fwww.blackhat.com\u002Fpresentations\u002Fbh-usa-09\u002FMARLINSPIKE\u002FBHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf","Blackhat",[],{"url":111,"source":112,"tags":113},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1874","Debian",[],{"url":115,"source":116,"tags":117},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:197","Mandriva",[],{"url":119,"source":116,"tags":120},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:216",[],{"url":122,"source":123,"tags":124},"http:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fannounce\u002F2009\u002Fmfsa2009-43.html","Mozilla",[125,74],"Patch",{"url":127,"source":128,"tags":129},"http:\u002F\u002Fwww.novell.com\u002Flinux\u002Fsecurity\u002Fadvisories\u002F2009_48_firefox.html","Novell",[],{"url":131,"source":132,"tags":133},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpuapr2010-099504.html","Oracle",[],{"url":135,"source":68,"tags":136},"http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2009-1207.html",[],{"url":138,"source":139,"tags":140},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F35891","Securityfocus",[125],{"url":142,"source":143,"tags":144},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002Fusn-810-1","Ubuntu",[],{"url":146,"source":147,"tags":148},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA10-103B.html","Us-cert",[149],"US Government Resource",{"url":151,"source":152,"tags":153},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F2085","Vupen",[125,74],{"url":155,"source":68,"tags":156},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=512912",[],{"url":158,"source":159,"tags":160},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A11174","Cisecurity",[],{"url":162,"source":159,"tags":163},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A8658",[],{"url":165,"source":143,"tags":166},"https:\u002F\u002Fusn.ubuntu.com\u002F810-2\u002F",[],{"url":67,"source":68,"tags":168},[],{"url":71,"source":72,"tags":170},[74],{"url":76,"source":72,"tags":172},[74],{"url":79,"source":72,"tags":174},[74],{"url":82,"source":72,"tags":176},[74],{"url":85,"source":72,"tags":178},[74],{"url":88,"source":72,"tags":180},[],{"url":91,"source":72,"tags":182},[],{"url":94,"source":72,"tags":184},[],{"url":97,"source":98,"tags":186},[],{"url":101,"source":98,"tags":188},[],{"url":104,"source":98,"tags":190},[],{"url":107,"source":108,"tags":192},[],{"url":111,"source":112,"tags":194},[],{"url":115,"source":116,"tags":196},[],{"url":119,"source":116,"tags":198},[],{"url":122,"source":123,"tags":200},[125,74],{"url":127,"source":128,"tags":202},[],{"url":131,"source":132,"tags":204},[],{"url":135,"source":68,"tags":206},[],{"url":138,"source":139,"tags":208},[125],{"url":142,"source":143,"tags":210},[],50,[213],{"id":214,"name":215,"description":216,"extendedDescription":217,"status":218,"abstraction":219,"structure":220},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","Certain languages allow direct addressing of memory locations and do not automatically ensure that these locations are valid for the memory buffer that is being referenced. This can cause read or write operations to be performed on memory locations that may be associated with other variables, data structures, or internal program data.","Stable","Class","Simple",1,[],{"title":224,"metaDescription":225,"keywords":226,"canonicalUrl":227,"structuredData":228},"What is CVE-2009-2404? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-2404, a critical severity cyber security vulnerability from 2009. Heap-based buffer overflow in a regular-expression parse...","CVE-2009-2404, CVE-2009-2404 vulnerability, CVE-2009-2404 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, mozilla security, aol security, gnome security, pidgin security, network_security_services vulnerability, instant_messenger vulnerability, evolution vulnerability, firefox vulnerability","\u002Fwhat-is\u002Fcve-2009-2404",{"@context":229,"@type":230,"headline":224,"description":225,"datePublished":10,"dateModified":11,"author":231,"publisher":235,"about":239,"mainEntityOfPage":243,"articleSection":246,"keywords":247},"https:\u002F\u002Fschema.org","TechArticle",{"@type":232,"name":233,"url":234},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":232,"name":233,"url":234,"logo":236},{"@type":237,"url":238},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":240,"name":6,"description":241,"additionalType":242},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":244,"@id":245},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-2404","Cybersecurity","CVE-2009-2404, CVE-2009-2404 vulnerability, CVE-2009-2404 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[249],{"Operator":250,"Negate":28,"Nodes":251},"AND",[252,257],{"Operator":253,"Negate":32,"CPEMatch":254},"OR",[255],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":256,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"000A1698-C9DE-49A1-9F5D-FDED34A134E8",{"Operator":253,"Negate":32,"CPEMatch":258},[259,261,263,265,267,269],{"Vulnerable":32,"Criteria":47,"MatchCriteriaID":260,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E8DF7CEB-81F5-46FC-9588-AF5326957C89",{"Vulnerable":32,"Criteria":51,"MatchCriteriaID":262,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6606C39B-8137-44B6-A96E-E0B8F67FAFFB",{"Vulnerable":32,"Criteria":54,"MatchCriteriaID":264,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"14E6A30E-7577-4569-9309-53A0AF7FE3AC",{"Vulnerable":32,"Criteria":57,"MatchCriteriaID":266,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"138701FB-929A-4683-B41F-CB014ACFE44A",{"Vulnerable":32,"Criteria":60,"MatchCriteriaID":268,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D5C8E657-3049-4462-98F6-296C60BC8C5C",{"Vulnerable":32,"Criteria":63,"MatchCriteriaID":270,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"87A0BF9F-F7E9-4196-BEF7-800B4C850990",[],[273],{"id":274,"eventType":275,"eventTime":276,"details":277,"label":278,"color":279},"fcf7b8f2-5b20-4561-b323-2b20e3645642","LOW_EPSS_DELTA","2026-06-16T04:07:00.788814+00:00","Daily EPSS score decreased by 0.169 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":281,"version":22},1792370472198,{"score":283,"band":284,"action":285,"scoredAt":286},54,"Medium","Plan remediation","2026-10-17T06:36:48.494232+00:00"]