CVE-2009-1303: The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.1...

Security readout for executives and security teams

This is an old Mozilla browser-engine flaw affecting legacy Firefox, Thunderbird, and SeaMonkey versions. A malicious remote input could crash the application and may have involved memory corruption. The provided sources do not show active exploitation, but any remaining legacy installations should be treated as obsolete risk. Exposure is likely limited to legacy systems still running the affected Mozilla versions or 2009-era distribution packages. Modern supported Mozilla releases are not identified as affected in the provided bundle. Inventory should focus on old desktops, lab systems, embedded images, and archived server builds containing these clients. Prioritize remediation where affected clients can browse external content or process untrusted email. This is a legacy vulnerability, so the main business risk is forgotten unsupported software rather than a broad modern exposure. Treat discoveries as hygiene and lifecycle failures requiring cleanup. Mitigation focus: Upgrade Firefox to 3.0.9 or later where still present.; Upgrade Thunderbird to 2.0.0.22 or later where still present.; Upgrade SeaMonkey to 1.1.16 or later where still present..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.