← Database

CVE-2009-3372

CRITICAL CVSS: 9.3 Published: 2009-10-29 Modified: 2026-06-16

Description

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.

Affected Platforms

Mozilla FirefoxMozilla Seamonkey

Weakness Type

NVD-CWE-Other

References