CVE-2009-4102

2009-11-29T13:08:00
ID CVE-2009-4102
Type cve
Reporter cve@mitre.org
Modified 2017-08-17T01:31:00

Description

Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed. Per info from the following advisory:

http://www.net-security.org/secworld.php?id=8527

Scored this CVE CIA:complete