# CVEs published 2009-10-29 18 CVEs were published on October 29, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-3370](https://cve.now/CVE-2009-3370.md): Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events tha (no CVSS) - [CVE-2009-3371](https://cve.now/CVE-2009-3371.md): Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) (no CVSS) - [CVE-2009-3372](https://cve.now/CVE-2009-3372.md): Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a craf (no CVSS) - [CVE-2009-3373](https://cve.now/CVE-2009-3373.md): Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows (no CVSS) - [CVE-2009-3374](https://cve.now/CVE-2009-3374.md): The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not (no CVSS) - [CVE-2009-3375](https://cve.now/CVE-2009-3375.md): content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attac (no CVSS) - [CVE-2009-3376](https://cve.now/CVE-2009-3376.md): Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO o (no CVSS) - [CVE-2009-3377](https://cve.now/CVE-2009-3377.md): Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attack (no CVSS) - [CVE-2009-3378](https://cve.now/CVE-2009-3378.md): The oggplay\_data\_handle\_theora\_frame function in media/liboggplay/src/liboggplay/oggplay\_data.c in liboggplay, as used in Mozilla Firefox 3. (no CVSS) - [CVE-2009-3379](https://cve.now/CVE-2009-3379.md): Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial o (no CVSS) - [CVE-2009-3380](https://cve.now/CVE-2009-3380.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attack (no CVSS) - [CVE-2009-3381](https://cve.now/CVE-2009-3381.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of (no CVSS) - [CVE-2009-3382](https://cve.now/CVE-2009-3382.md): layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter fra (no CVSS) - [CVE-2009-3383](https://cve.now/CVE-2009-3383.md): Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial (no CVSS) - [CVE-2009-3626](https://cve.now/CVE-2009-3626.md): Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid (no CVSS) - [CVE-2009-3627](https://cve.now/CVE-2009-3627.md): The decode\_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite (no CVSS) - [CVE-2009-3638](https://cve.now/CVE-2009-3638.md): Integer overflow in the kvm\_dev\_ioctl\_get\_supported\_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6 (no CVSS) - [CVE-2009-3640](https://cve.now/CVE-2009-3640.md): The update\_cr8\_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-10-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.