Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-3985
HistoryDec 15, 2009 - 12:00 a.m.

CVE-2009-3985

2009-12-1500:00:00
ubuntu.com
ubuntu.com
18

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.031

Percentile

91.1%

JSON

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before
2.0.1, allows remote attackers to associate spoofed content with an invalid
URL by setting document.location to this URL, and then writing arbitrary
web script or HTML to the associated blank document, a related issue to
CVE-2009-2654.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchseamonkey<ย 2.0.8+build1+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu9.04noarchseamonkey<ย 2.0.8+build1+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchseamonkey<ย 2.0.8+build1+nobinonly-0ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchseamonkey<ย 2.0.8+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9<ย 1.9.0.16+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9<ย 1.9.0.16+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9<ย 1.9.0.16+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9.1<ย 1.9.1.6+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchxulrunner-1.9.1<ย 1.9.1.6+nobinonly-0ubuntu0.9.10.1UNKNOWN

Related

prion 2
cve 2
nvd 2
cvelist 2
exploitpack 1
seebug 2
veracode 2
packetstorm 1
openvas 76
debian 2
ubuntucve 1
mozilla 2
securityvulns 4
ubuntu 5
nessus 50
exploitdb 1
osv 2
centos 4
oraclelinux 3
redhat 3
fedora 30
freebsd 1
suse 1
prion
prion
Design/Logic Flaw
2009-12-17 17:30:00
Design/Logic Flaw
2009-08-03 14:30:00
cve
cve
CVE-2009-3985
2009-12-17 17:30:00
CVE-2009-2654
2009-08-03 14:30:00
nvd
nvd
CVE-2009-3985
2009-12-17 17:30:00
CVE-2009-2654
2009-08-03 14:30:00
cvelist
cvelist
CVE-2009-3985
2009-12-17 17:00:00
CVE-2009-2654
2009-08-03 14:00:00
exploitpack
exploitpack
Mozilla Firefox - Location Bar Spoofing
2009-12-18 00:00:00
seebug
seebug
Firefoxๅ†…ๅฎนๆณจๅ…ฅ็ฝ‘้กตๆฌบ้ช—ๆผๆดž
2009-12-18 00:00:00
Mozilla Firefox Location Bar Spoofing Vulnerability
2009-12-18 00:00:00
veracode
veracode
Spoofed Content Association
2020-04-10 00:41:43
Spoofable Address Bar
2020-04-10 00:37:55
packetstorm
packetstorm
Mozilla Firefox Location Bar Spoof
2009-12-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-811-1)
2009-08-17 00:00:00
Ubuntu USN-811-1 (xulrunner-1.9)
2009-08-17 00:00:00
Debian Security Advisory DSA 1873-1 (xulrunner)
2009-09-02 00:00:00
debian
debian
[SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities
2009-08-26 18:51:42
[SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities
2009-12-16 21:15:39
ubuntucve
ubuntucve
CVE-2009-2654
2009-08-03 00:00:00
mozilla
mozilla
Location bar and SSL indicator spoofing via window.open() on invalid URL โ€” Mozilla
2009-08-03 00:00:00
Location bar spoofing vulnerabilities โ€” Mozilla
2009-12-15 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-44
2009-08-07 00:00:00
Mozilla Foundation Security Advisory 2009-69
2009-12-17 00:00:00
Mozilla Firefox, Thunderbird, SeaMonkey, NSS multiple security vulnerabilities
2009-08-07 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerability
2009-08-08 00:00:00
Firefox 3.0 and Xulrunner 1.9 regression
2010-01-08 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2009-12-18 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 vulnerability (USN-811-1)
2009-08-05 00:00:00
Debian DSA-1873-1 : xulrunner - programming error
2010-02-24 00:00:00
Mandriva Linux Security Advisory : firefox (MDVSA-2009:339)
2009-12-23 00:00:00
exploitdb
exploitdb
Mozilla Firefox - Location Bar Spoofing
2009-12-18 00:00:00
osv
osv
xulrunner - spoofing vulnerabilities
2009-08-26 00:00:00
xulrunner - several vulnerabilities
2009-12-16 00:00:00
centos
centos
seamonkey security update
2009-09-10 22:51:03
firefox, xulrunner security update
2009-12-18 02:04:10
seamonkey security update
2009-09-10 11:03:30
oraclelinux
oraclelinux
seamonkey security update
2009-09-10 00:00:00
firefox security update
2009-12-16 00:00:00
firefox security update
2009-09-10 00:00:00
redhat
redhat
(RHSA-2009:1431) Critical: seamonkey security update
2009-09-09 00:00:00
(RHSA-2009:1674) Critical: firefox security update
2009-12-16 00:00:00
(RHSA-2009:1432) Critical: seamonkey security update
2009-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: seamonkey-2.0.1-1.fc12
2009-12-18 04:36:12
[SECURITY] Fedora 12 Update: firefox-3.5.6-1.fc12
2009-12-18 04:38:06
[SECURITY] Fedora 11 Update: pcmanx-gtk2-0.3.8-11.fc11
2009-12-18 04:32:41
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-12-16 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-12-22 15:19:49

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.031

Percentile

91.1%

JSON
Related for UB:CVE-2009-3985
prion2cve2nvd2cvelist2exploitpack1seebug2veracode2packetstorm1openvas76debian2ubuntucve1mozilla2securityvulns4ubuntu5nessus50exploitdb1osv2centos4oraclelinux3redhat3fedora30freebsd1suse1