PT-2009-3843 · Mozilla+1 · Firefox+2

Paolo Amadini · Publicado 2009-04-21 · Atualizado 2024-12-12 · CVE-2009-1311

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.9 SeaMonkey versions prior to 1.1.17

Description The issue allows user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame. This occurs when the inner frame's URL receives POST data from an outer page during a SAVEMODE FILEONLY save of the inner frame.

Recommendations For Mozilla Firefox versions prior to 3.0.9, update to version 3.0.9 or later to resolve the issue. For SeaMonkey versions prior to 1.1.17, update to version 1.1.17 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-1311

DSA-1797-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:0436

RHSA-2009:0437

RHSA-2009_0436

RHSA-2009_0437

Produtos afetados

Firefox

Red Hat

Seamonkey

Referências · 2111

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=471962 · Exploit
• https://suse.com/security/cve/CVE-2009-0354 · Nota
• https://suse.com/security/cve/CVE-2024-3302 · Nota
• https://suse.com/security/cve/CVE-2024-1551 · Nota
• https://suse.com/security/cve/CVE-2012-1937 · Nota
• https://suse.com/security/cve/CVE-2023-25731 · Nota
• https://suse.com/security/cve/CVE-2009-1307 · Nota
• https://suse.com/security/cve/CVE-2020-6812 · Nota
• https://suse.com/security/cve/CVE-2024-4769 · Nota
• https://suse.com/security/cve/CVE-2016-5282 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-1210 · Nota
• https://suse.com/security/cve/CVE-2009-3381 · Nota
• https://suse.com/security/cve/CVE-2016-2798 · Nota
• https://suse.com/security/cve/CVE-2023-23601 · Nota