PT-2009-3018 · Mozilla+1 · Firefox+1

Moz_Bug_R_A4 · Published 2009-02-04 · Updated 2024-12-12 · CVE-2009-0355

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.0.6

Description The issue allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element. This occurs because the nsSessionStore.js component in Mozilla Firefox does not block changes of INPUT elements to type="file" during tab restoration.

Recommendations For versions prior to 3.0.6, update to version 3.0.6 or later to resolve the issue. As a temporary workaround, consider avoiding the restoration of tabs from untrusted sources until a patch is applied. Restrict access to file input elements to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0355

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2009:0256

RHSA-2009:0257

RHSA-2009:0258

RHSA-2009_0256

RHSA-2009_0257

RHSA-2009_0258

Affected Products

Firefox

Red Hat

References · 1905

• http://secunia.com/advisories/33831 · Vendor Advisory
• http://secunia.com/advisories/34417 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00771.html · Vendor Advisory
• http://secunia.com/advisories/33846 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-0257.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0355 · Security Note
• http://ubuntu.com/usn/usn-717-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• http://secunia.com/advisories/33816 · Vendor Advisory
• http://secunia.com/advisories/33799 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:044 · Vendor Advisory
• http://secunia.com/advisories/33841 · Vendor Advisory
• http://ubuntu.com/usn/usn-717-1 · Vendor Advisory
• http://secunia.com/advisories/33869 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00769.html · Vendor Advisory