PT-2009-6302 · Wikipedia · Wikipedia Toolbar

Publicado

2009-12-02

·

Atualizado

2024-03-12

·

CVE-2009-4127

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Wikipedia Toolbar extension versions prior to 0.5.9.2
Description The issue allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges. This is achieved via vectors involving unspecified Toolbar buttons and the eval function.
Recommendations For versions prior to 0.5.9.2, update to version 0.5.9.2 or later to resolve the issue. As a temporary workaround, consider disabling the use of unspecified Toolbar buttons until a patch is available. Avoid using the eval function in the affected extension until the issue is resolved.

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-4127
ROSA-SA-2024-2370

Produtos afetados

Wikipedia Toolbar