PT-2009-3017 · Mozilla+1 · Firefox+1

Moz_Bug_R_A4 · Publicado 2009-02-04 · Atualizado 2024-12-12 · CVE-2009-0354

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.0.0 through 3.0.5

Description A cross-domain issue allows remote attackers to bypass the Same Origin Policy, access properties of an arbitrary window, and conduct cross-site scripting (XSS) attacks. This is achieved through vectors involving a chrome XBL method and the window.eval function.

Recommendations For Mozilla Firefox versions 3.0.0 through 3.0.5, update to version 3.0.6 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-0354

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:0256

RHSA-2009_0256

Produtos afetados

Firefox

Red Hat

Referências · 1890

• https://suse.com/security/cve/CVE-2009-0354 · Nota
• https://suse.com/security/cve/CVE-2024-3302 · Nota
• https://suse.com/security/cve/CVE-2024-1551 · Nota
• https://suse.com/security/cve/CVE-2023-25731 · Nota
• https://suse.com/security/cve/CVE-2009-1307 · Nota
• https://suse.com/security/cve/CVE-2020-6812 · Nota
• https://suse.com/security/cve/CVE-2024-4769 · Nota
• https://suse.com/security/cve/CVE-2016-5282 · Nota
• https://suse.com/security/cve/CVE-2010-1210 · Nota
• https://suse.com/security/cve/CVE-2023-23601 · Nota
• https://suse.com/security/cve/CVE-2013-0795 · Nota
• https://suse.com/security/cve/CVE-2013-1720 · Nota
• https://suse.com/security/cve/CVE-2011-3650 · Nota
• https://suse.com/security/cve/CVE-2024-5700 · Nota
• https://suse.com/security/cve/CVE-2020-26972 · Nota