Lucene search
HistoryNov 29, 2009 - 1:08 p.m.
CVE-2009-4100
yoono
extension
firefox
cve-2009-4100
security
vulnerability
remote execution
cross-domain scripting
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.3%
Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload.
Affected configurations
Node
yoonoyoonoRangeβ€6.1.0
ORyoonoyoonoMatch2.0.2.474
ORyoonoyoonoMatch2.0.3.564
ORyoonoyoonoMatch2.0.4.641
ORyoonoyoonoMatch2.1.0.743
ORyoonoyoonoMatch2.2.1.1038
ORyoonoyoonoMatch3.0.0.1268
ORyoonoyoonoMatch3.0.0.1270
ORyoonoyoonoMatch3.0.1.1388
ORyoonoyoonoMatch3.0.2.1976
ORyoonoyoonoMatch3.0.3.2369
ORyoonoyoonoMatch3.0.4.2469
ORyoonoyoonoMatch3.0.5.2626
ORyoonoyoonoMatch3.0.6.2723
ORyoonoyoonoMatch3.1.0.2898
ORyoonoyoonoMatch3.1.1.2999
ORyoonoyoonoMatch4.0.0.4529
ORyoonoyoonoMatch4.0.1.4774
ORyoonoyoonoMatch4.0.2.5149
ORyoonoyoonoMatch4.0.3.5488
ORyoonoyoonoMatch5.0.1.11511_11520
ORyoonoyoonoMatch5.0.3
ORyoonoyoonoMatch5.0.4
ORyoonoyoonoMatch5.0.5
ORyoonoyoonoMatch5.0.6
ORyoonoyoonoMatch5.0.7
ORyoonoyoonoMatch5.0.7.2
ORyoonoyoonoMatch5.1.0
ORyoonoyoonoMatch5.2.0
ORyoonoyoonoMatch5.3.0
ORyoonoyoonoMatch5.4.0
ORyoonoyoonoMatch6.0.0
ORyoonoyoonoMatch6.0.1
mozillafirefox
Related
prion
prion
Cross site scripting
2009-11-29 13:08:00
nvd
nvd
CVE-2009-4100
2009-11-29 13:08:29
cvelist
cvelist
CVE-2009-4100
2009-11-28 11:00:00
seebug
seebug
Firefox Yoonoζ©ε±DOMδΊδ»Άε€ηε¨θ·¨εθζ¬ζ§θ‘ζΌζ΄
2009-12-04 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2370
2024-03-12 08:35:15
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.3%
Related for CVE-2009-4100