Lucene search

K
cve[email protected]CVE-2009-4630
HistoryJan 29, 2010 - 6:30 p.m.

CVE-2009-4630

2010-01-2918:30:00
CWE-200
web.nvd.nist.gov
26
mozilla
necko
dns prefetching
firefox
seamonkey
security issue
cve-2009-4630

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.7%

Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application’s user by logging DNS requests. NOTE: the vendor disputes the significance of this issue, stating “I don’t think we necessarily need to worry about that case.”

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.7%

Related for CVE-2009-4630