Lucene search
HistoryJun 12, 2009 - 9:30 p.m.
CVE-2009-1834
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7.3
Confidence
High
EPSS
0.114
Percentile
95.2%
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through \u115E characters.
Affected configurations
Node
mozillafirefoxRange≤3.0.10
ORmozillafirefoxMatch0.1
ORmozillafirefoxMatch0.2
ORmozillafirefoxMatch0.3
ORmozillafirefoxMatch0.4
ORmozillafirefoxMatch0.5
ORmozillafirefoxMatch0.6
ORmozillafirefoxMatch0.6.1
ORmozillafirefoxMatch0.7
ORmozillafirefoxMatch0.7.1
ORmozillafirefoxMatch0.8
ORmozillafirefoxMatch0.9
ORmozillafirefoxMatch0.9rc
ORmozillafirefoxMatch0.9.1
ORmozillafirefoxMatch0.9.2
ORmozillafirefoxMatch0.9.3
ORmozillafirefoxMatch0.9_rc
ORmozillafirefoxMatch0.10
ORmozillafirefoxMatch0.10.1
ORmozillafirefoxMatch1.0
ORmozillafirefoxMatch1.0preview_release
ORmozillafirefoxMatch1.0.1
ORmozillafirefoxMatch1.0.2
ORmozillafirefoxMatch1.0.3
ORmozillafirefoxMatch1.0.4
ORmozillafirefoxMatch1.0.5
ORmozillafirefoxMatch1.0.6
ORmozillafirefoxMatch1.0.6linux
ORmozillafirefoxMatch1.0.7
ORmozillafirefoxMatch1.0.8
ORmozillafirefoxMatch1.4.1
ORmozillafirefoxMatch1.5
ORmozillafirefoxMatch1.5beta1
ORmozillafirefoxMatch1.5beta2
ORmozillafirefoxMatch1.5.0.1
ORmozillafirefoxMatch1.5.0.2
ORmozillafirefoxMatch1.5.0.3
ORmozillafirefoxMatch1.5.0.4
ORmozillafirefoxMatch1.5.0.5
ORmozillafirefoxMatch1.5.0.6
ORmozillafirefoxMatch1.5.0.7
ORmozillafirefoxMatch1.5.0.8
ORmozillafirefoxMatch1.5.0.9
ORmozillafirefoxMatch1.5.0.10
ORmozillafirefoxMatch1.5.0.11
ORmozillafirefoxMatch1.5.0.12
ORmozillafirefoxMatch1.5.1
ORmozillafirefoxMatch1.5.2
ORmozillafirefoxMatch1.5.3
ORmozillafirefoxMatch1.5.4
ORmozillafirefoxMatch1.5.5
ORmozillafirefoxMatch1.5.6
ORmozillafirefoxMatch1.5.7
ORmozillafirefoxMatch1.5.8
ORmozillafirefoxMatch1.8
ORmozillafirefoxMatch2.0
ORmozillafirefoxMatch2.0beta_1
ORmozillafirefoxMatch2.0beta1
ORmozillafirefoxMatch2.0rc2
ORmozillafirefoxMatch2.0rc3
ORmozillafirefoxMatch2.0.0.1
ORmozillafirefoxMatch2.0.0.2
ORmozillafirefoxMatch2.0.0.3
ORmozillafirefoxMatch2.0.0.4
ORmozillafirefoxMatch2.0.0.5
ORmozillafirefoxMatch2.0.0.6
ORmozillafirefoxMatch2.0.0.7
ORmozillafirefoxMatch2.0.0.8
ORmozillafirefoxMatch2.0.0.9
ORmozillafirefoxMatch2.0.0.10
ORmozillafirefoxMatch2.0.0.11
ORmozillafirefoxMatch2.0.0.12
ORmozillafirefoxMatch2.0.0.13
ORmozillafirefoxMatch2.0.0.14
ORmozillafirefoxMatch2.0.0.15
ORmozillafirefoxMatch2.0.0.16
ORmozillafirefoxMatch2.0.0.17
ORmozillafirefoxMatch2.0.0.18
ORmozillafirefoxMatch2.0.0.19
ORmozillafirefoxMatch2.0.0.20
ORmozillafirefoxMatch2.0.0.21
ORmozillafirefoxMatch2.0_.1
ORmozillafirefoxMatch2.0_.4
ORmozillafirefoxMatch2.0_.5
ORmozillafirefoxMatch2.0_.6
ORmozillafirefoxMatch2.0_.7
ORmozillafirefoxMatch2.0_.9
ORmozillafirefoxMatch2.0_.10
ORmozillafirefoxMatch2.0_8
ORmozillafirefoxMatch3.0
ORmozillafirefoxMatch3.0alpha
ORmozillafirefoxMatch3.0beta2
ORmozillafirefoxMatch3.0beta5
ORmozillafirefoxMatch3.0.1
ORmozillafirefoxMatch3.0.2
ORmozillafirefoxMatch3.0.3
ORmozillafirefoxMatch3.0.4
ORmozillafirefoxMatch3.0.5
ORmozillafirefoxMatch3.0.6
ORmozillafirefoxMatch3.0.7
ORmozillafirefoxMatch3.0.8
ORmozillafirefoxMatch3.0.9
ORmozillaseamonkeyRange≤1.1.16
ORmozillaseamonkeyMatch1.0
ORmozillaseamonkeyMatch1.0alpha
ORmozillaseamonkeyMatch1.0beta
ORmozillaseamonkeyMatch1.0dev
ORmozillaseamonkeyMatch1.0alpha
ORmozillaseamonkeyMatch1.0beta
ORmozillaseamonkeyMatch1.0.1
ORmozillaseamonkeyMatch1.0.3
ORmozillaseamonkeyMatch1.0.4
ORmozillaseamonkeyMatch1.0.6
ORmozillaseamonkeyMatch1.0.8
ORmozillaseamonkeyMatch1.0.9
ORmozillaseamonkeyMatch1.0.99
ORmozillaseamonkeyMatch1.1
ORmozillaseamonkeyMatch1.1alpha
ORmozillaseamonkeyMatch1.1beta
ORmozillaseamonkeyMatch1.1.1
ORmozillaseamonkeyMatch1.1.3
ORmozillaseamonkeyMatch1.1.5
ORmozillaseamonkeyMatch1.1.51.1.10
ORmozillaseamonkeyMatch1.1.6
ORmozillaseamonkeyMatch1.1.7
ORmozillaseamonkeyMatch1.1.8
ORmozillaseamonkeyMatch1.1.9
ORmozillaseamonkeyMatch1.1.10
ORmozillaseamonkeyMatch1.1.11
ORmozillaseamonkeyMatch1.1.12
ORmozillaseamonkeyMatch1.1.13
ORmozillaseamonkeyMatch1.1.15
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox | 0.1 | cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:* |
| mozilla | firefox | 0.2 | cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:* |
| mozilla | firefox | 0.3 | cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:* |
| mozilla | firefox | 0.4 | cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:* |
| mozilla | firefox | 0.5 | cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:* |
| mozilla | firefox | 0.6 | cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:* |
| mozilla | firefox | 0.6.1 | cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:* |
| mozilla | firefox | 0.7 | cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:* |
| mozilla | firefox | 0.7.1 | cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:* |
References
osvdb.org/55162
secunia.com/advisories/35331
secunia.com/advisories/35415
secunia.com/advisories/35431
secunia.com/advisories/35439
secunia.com/advisories/35468
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468
sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1
www.debian.org/security/2009/dsa-1820
www.mozilla.org/security/announce/2009/mfsa2009-25.html
www.securityfocus.com/bid/35326
www.securityfocus.com/bid/35388
www.vupen.com/english/advisories/2009/1572
bugzilla.mozilla.org/show_bug.cgi?id=479413
bugzilla.redhat.com/show_bug.cgi?id=503573
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10436
rhn.redhat.com/errata/RHSA-2009-1095.html
www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html
www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html
Related
ubuntucve
ubuntucve
CVE-2009-1834
2009-06-12 00:00:00
cvelist
cvelist
CVE-2009-1834
2009-06-12 21:07:00
mozilla
mozilla
URL spoofing with invalid unicode characters — Mozilla
2009-06-11 00:00:00
cve
cve
CVE-2009-1834
2009-06-12 21:30:00
prion
prion
Design/Logic Flaw
2009-06-12 21:30:00
veracode
veracode
Privilege Escalation
2020-04-10 00:33:46
exploitdb
exploitdb
Mozilla Firefox 3.0.10 / SeaMonkey 1.1.16 - Address Bar URI Spoofing
2009-05-11 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-25
2009-06-14 00:00:00
Mozilla Firefox multiple security vulnerabilities
2009-06-14 00:00:00
openvas
openvas
Mozilla Seamonkey Multiple Vulnerabilities (Jun 2009) - Windows
2009-06-16 00:00:00
Mozilla Seamonkey Multiple Vulnerabilities (Jun 2009) - Linux
2009-06-16 00:00:00
Mozilla Seamonkey Multiple Vulnerability Jun-09 (Linux)
2009-06-16 00:00:00
nessus
nessus
Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1096)
2013-07-12 00:00:00
CentOS 3 : seamonkey (CESA-2009:1096)
2009-06-15 00:00:00
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-12.fc9
2009-06-16 02:33:47
[SECURITY] Fedora 9 Update: kazehakase-0.5.6-4.fc9.3
2009-06-16 02:33:47
[SECURITY] Fedora 9 Update: mugshot-1.2.2-10.fc9
2009-06-16 02:33:47
redhat
redhat
(RHSA-2009:1095) Critical: firefox security update
2009-06-11 00:00:00
osv
osv
xulrunner - several vulnerabilities
2009-06-18 00:00:00
oraclelinux
oraclelinux
firefox security update
2009-06-12 00:00:00
centos
centos
firefox, xulrunner security update
2009-06-19 11:07:44
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-06-12 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-06-16 16:38:22
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-06-11 00:00:00
debian
debian
[SECURITY] [DSA 1820-1] New xulrunner packages fix several vulnerabilities
2009-06-18 14:13:03
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7.3
Confidence
High
EPSS
0.114
Percentile
95.2%
Related for NVD:CVE-2009-1834