PatchTheCVEk-meleon vulnerabilities and fixes
Recent CVEs affecting k-meleon, with upgrade or downgrade steps. 2 tracked.
Also searched as: k meleon.
k-meleon has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-08-28. Highest priority: CVE-2009-0689 (score 53/100).
- CVE-2009-3008 MEDIUM 4.3 DOWNGRADE K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative UR
- CVE-2009-0689 MEDIUM 6.8 DOWNGRADE DOWNGRADE Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) impl
FAQ
How do I fix k-meleon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is k-meleon being exploited right now?
None of the tracked k-meleon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which k-meleon CVE should I patch first?
CVE-2009-0689 currently ranks highest (53/100): Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) impl.