Lucene search
Mozilla FoundationMFSA2009-02HistoryFeb 03, 2009 - 12:00 a.m.
XSS using a chrome XBL method and window.eval — Mozilla
2009-02-0300:00:00
Mozilla Foundation
www.mozilla.org
16
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.2%
Mozilla security researcher moz_bug_r_a4 reported that a chrome XBL method can be used in conjuction with window.eval to execute arbitrary JavaScript within the context of another website, violating the same origin policy.
Related
prion
prion
Cross site scripting
2009-02-04 19:30:00
cve
cve
CVE-2009-0354
2009-02-04 19:30:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-02
2009-02-05 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2009-02-05 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:31:10
ubuntucve
ubuntucve
CVE-2009-0354
2009-02-04 00:00:00
openvas
openvas
Ubuntu USN-717-1 (xulrunner-1.9)
2009-02-13 00:00:00
Ubuntu: Security Advisory (USN-717-1)
2009-02-13 00:00:00
Mozilla Firefox Multiple Vulnerabilities Feb-09 (Windows)
2009-02-20 00:00:00
nessus
nessus
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-02-10 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: ruby-gnome2-0.17.0-5.fc9
2009-02-06 05:22:35
[SECURITY] Fedora 10 Update: evolution-rss-0.1.2-4.fc10
2009-02-06 05:21:19
[SECURITY] Fedora 9 Update: epiphany-2.22.2-7.fc9
2009-02-06 05:22:34
redhat
redhat
(RHSA-2009:0256) Critical: firefox security update
2009-02-04 00:00:00
freebsd
freebsd
firefox -- multiple vulnerabilities
2009-02-04 00:00:00
centos
centos
firefox, nss, xulrunner security update
2009-02-05 00:56:08
oraclelinux
oraclelinux
firefox security update
2009-02-04 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-02-16 13:05:54
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
69.2%
Related for MFSA2009-02