Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3385
HistoryMar 23, 2010 - 12:53 a.m.

CVE-2009-3385

2010-03-2300:53:22
CWE-264
[email protected]
web.nvd.nist.gov
1

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.041

Percentile

92.2%

JSON

The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.

Affected configurations

NVD
Node
mozillaseamonkeyRangeโ‰ค1.1.18
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0alpha
OR
mozillaseamonkeyMatch1.0beta
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.4
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1alpha
OR
mozillaseamonkeyMatch1.1beta
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillaseamonkeyMatch1.1.13
OR
mozillaseamonkeyMatch1.1.14
OR
mozillaseamonkeyMatch1.1.15
OR
mozillaseamonkeyMatch1.1.16
OR
mozillaseamonkeyMatch1.1.17

Related

veracode 1
securityvulns 2
ubuntucve 1
prion 1
cve 1
cvelist 1
mozilla 1
oraclelinux 1
centos 1
redhat 1
nessus 9
fedora 1
openvas 5
freebsd 1
veracode
veracode
Information Disclosure
2020-04-10 00:36:54
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-06
2010-04-06 00:00:00
ะœะฝะพะณะพั‡ะธัะปะตะฝะฝั‹ะต ัƒัะทะฒะธะผะพัั‚ะธ ะฒ Mozilla Firefox / Seamonkey multiple security vulnerabilities
2013-08-20 00:00:00
ubuntucve
ubuntucve
CVE-2009-3385
2010-03-23 00:00:00
prion
prion
Design/Logic Flaw
2010-03-23 00:53:00
cve
cve
CVE-2009-3385
2010-03-23 00:53:22
cvelist
cvelist
CVE-2009-3385
2010-03-22 17:23:00
mozilla
mozilla
Scriptable plugin execution in SeaMonkey mail โ€” Mozilla
2010-03-16 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2009-10-28 00:00:00
centos
centos
seamonkey security update
2009-10-28 13:15:48
redhat
redhat
(RHSA-2009:1531) Critical: seamonkey security update
2009-10-27 00:00:00
nessus
nessus
SeaMonkey < 1.1.19 Multiple Vulnerabilities
2010-03-19 00:00:00
RHEL 3 / 4 : seamonkey (RHSA-2009:1531)
2009-10-28 00:00:00
SuSE9 Security Update : epiphany (YOU Patch Number 12616)
2010-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: seamonkey-1.1.19-1.fc11
2010-04-21 21:53:31
openvas
openvas
FreeBSD Ports: seamonkey, linux-seamonkey
2010-03-30 00:00:00
Fedora Update for seamonkey FEDORA-2010-7100
2010-04-29 00:00:00
FreeBSD Ports: seamonkey, linux-seamonkey
2010-03-30 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-03-16 00:00:00

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0.041

Percentile

92.2%

JSON
Related for NVD:CVE-2009-3385
veracode1securityvulns2ubuntucve1prion1cve1cvelist1mozilla1oraclelinux1centos1redhat1nessus9fedora1openvas5freebsd1