CVE-2009-3372

HIGH · CVSS 9.3 EPSS 3.98%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-10-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2009-3372

Severity

HIGH

CVSS

9.3

EPSS

3.98%

Firefox

Original Filing — NVD Description

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.