Lucene search
Mozilla FoundationMFSA2009-02HistoryFeb 03, 2009 - 12:00 a.m.
XSS using a chrome XBL method and window.eval — Mozilla
2009-02-0300:00:00
Mozilla Foundation
www.mozilla.org
23
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
69.6%
Mozilla security researcher moz_bug_r_a4 reported that a chrome XBL method can be used in conjuction with window.eval to execute arbitrary JavaScript within the context of another website, violating the same origin policy.
Affected configurations
Node
mozillafirefoxRange<3.0.6
Related
prion
prion
Cross site scripting
2009-02-04 19:30:00
cve
cve
CVE-2009-0354
2009-02-04 19:30:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-02
2009-02-05 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2009-02-05 00:00:00
cvelist
cvelist
CVE-2009-0354
2009-02-04 19:00:00
ubuntucve
ubuntucve
CVE-2009-0354
2009-02-04 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:31:10
nvd
nvd
CVE-2009-0354
2009-02-04 19:30:00
openvas
openvas
Ubuntu USN-717-1 (xulrunner-1.9)
2009-02-13 00:00:00
Ubuntu: Security Advisory (USN-717-1)
2009-02-13 00:00:00
Fedora Core 10 FEDORA-2009-1398 (xulrunner)
2009-02-13 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-02-10 00:00:00
nessus
nessus
FreeBSD : firefox -- multiple vulnerabilities (8b491182-f842-11dd-94d9-0030843d3802)
2009-02-12 00:00:00
openSUSE Security Update : MozillaFirefox (MozillaFirefox-509)
2009-07-21 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: Miro-1.2.8-2.fc10
2009-02-06 05:21:19
[SECURITY] Fedora 9 Update: blam-1.8.5-5.fc9.1
2009-02-06 05:22:34
[SECURITY] Fedora 9 Update: galeon-2.0.7-5.fc9
2009-02-06 05:22:34
redhat
redhat
(RHSA-2009:0256) Critical: firefox security update
2009-02-04 00:00:00
oraclelinux
oraclelinux
firefox security update
2009-02-04 00:00:00
freebsd
freebsd
firefox -- multiple vulnerabilities
2009-02-04 00:00:00
centos
centos
firefox, nss, xulrunner security update
2009-02-05 00:56:08
suse
suse
remote code execution in MozillaFirefox
2009-02-16 13:05:54
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
69.6%
Related for MFSA2009-02