Firefox allows Refresh header to redirect to javascript: URIs — Mozilla

🗓️ 21 Apr 2009 00:00:00Reported by Mozilla FoundationType

mozilla

mozilla🔗 www.mozilla.org👁 46 Views

Firefox vulnerability allows javascript URI redirectio

Reporter	Title	Published	Views	Family All 150
FreeBSD	mozilla -- multiple vulnerabilities	21 Apr 200900:00	–	freebsd
Tenable Nessus	Mozilla Firefox < 3.0.9 Multiple Vulnerabilities	22 Apr 200900:00	–	nessus
Tenable Nessus	Mozilla Thunderbird < 2.0.0.22 Multiple Vulnerabilities	18 Aug 200400:00	–	nessus
Tenable Nessus	SeaMonkey < 1.1.17 Multiple Vulnerabilities	18 Aug 200400:00	–	nessus
Tenable Nessus	CentOS 4 / 5 : firefox (CESA-2009:0436)	6 Jan 201000:00	–	nessus
Tenable Nessus	CentOS 3 / 4 : seamonkey (CESA-2009:0437)	26 May 200900:00	–	nessus
Tenable Nessus	Debian DSA-1797-1 : xulrunner - several vulnerabilities	11 May 200900:00	–	nessus
Tenable Nessus	Fedora 9 : Miro-2.0.3-3.fc9 / blam-1.8.5-8.fc9.1 / chmsee-1.0.1-11.fc9 / devhelp-0.19.1-11.fc9 / etc (2009-3875)	23 Apr 200900:00	–	nessus
Tenable Nessus	Fedora 10 : Miro-2.0.3-3.fc10 / blam-1.8.5-9.fc10 / devhelp-0.22-7.fc10 / epiphany-2.24.3-5.fc10 / etc (2009-3893)	27 Apr 200900:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (3b18e237-2f15-11de-9672-0030843d3802)	22 Apr 200900:00	–	nessus

Vulners

Node

mozilla firefoxRange<3.0.9

Source	Link
bugzilla	www.bugzilla.mozilla.org/buglist.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

21 Apr 2009 00:00Current

1Low risk

Vulners AI Score1

CVSS 24.3

EPSS0.05662

firefox vulnerability javascript uri redirection xss attack arbitrary javascript mozilla