Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-0354
HistoryFeb 04, 2009 - 7:30 p.m.

CVE-2009-0354

2009-02-0419:30:00
CWE-79
[email protected]
web.nvd.nist.gov
8

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.

Affected configurations

Nvd
Node
mozillafirefoxMatch3.0
OR
mozillafirefoxMatch3.0alpha
OR
mozillafirefoxMatch3.0beta2
OR
mozillafirefoxMatch3.0beta5
OR
mozillafirefoxMatch3.0.1
OR
mozillafirefoxMatch3.0.2
OR
mozillafirefoxMatch3.0.3
OR
mozillafirefoxMatch3.0.4
OR
mozillafirefoxMatch3.0.5
VendorProductVersionCPE
mozillafirefox3.0cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*
mozillafirefox3.0cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*
mozillafirefox3.0cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*
mozillafirefox3.0cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*
mozillafirefox3.0.1cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*
mozillafirefox3.0.2cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*
mozillafirefox3.0.3cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*
mozillafirefox3.0.4cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*
mozillafirefox3.0.5cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*

Related

cve 1
prion 1
mozilla 1
cvelist 1
ubuntucve 1
veracode 1
securityvulns 2
openvas 27
ubuntu 1
nessus 13
fedora 40
redhat 1
freebsd 1
centos 1
suse 1
oraclelinux 1
gentoo 1
cve
cve
CVE-2009-0354
2009-02-04 19:30:00
prion
prion
Cross site scripting
2009-02-04 19:30:00
mozilla
mozilla
XSS using a chrome XBL method and window.eval — Mozilla
2009-02-03 00:00:00
cvelist
cvelist
CVE-2009-0354
2009-02-04 19:00:00
ubuntucve
ubuntucve
CVE-2009-0354
2009-02-04 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:31:10
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-02
2009-02-05 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2009-02-05 00:00:00
openvas
openvas
Ubuntu USN-717-1 (xulrunner-1.9)
2009-02-13 00:00:00
Ubuntu: Security Advisory (USN-717-1)
2009-02-13 00:00:00
Fedora Core 10 FEDORA-2009-1398 (xulrunner)
2009-02-13 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-02-10 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 8.10 : firefox-3.0, xulrunner-1.9 vulnerabilities (USN-717-1)
2009-04-23 00:00:00
FreeBSD : firefox -- multiple vulnerabilities (8b491182-f842-11dd-94d9-0030843d3802)
2009-02-12 00:00:00
Fedora 9 : Miro-1.2.7-4.fc9 / blam-1.8.5-5.fc9.1 / cairo-dock-1.6.3.1-1.fc9.3 / chmsee-1.0.1-8.fc9 / etc (2009-1399)
2009-02-06 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: Miro-1.2.8-2.fc10
2009-02-06 05:21:19
[SECURITY] Fedora 9 Update: blam-1.8.5-5.fc9.1
2009-02-06 05:22:34
[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-5.fc10
2009-02-06 05:21:19
redhat
redhat
(RHSA-2009:0256) Critical: firefox security update
2009-02-04 00:00:00
freebsd
freebsd
firefox -- multiple vulnerabilities
2009-02-04 00:00:00
centos
centos
firefox, nss, xulrunner security update
2009-02-05 00:56:08
suse
suse
remote code execution in MozillaFirefox
2009-02-16 13:05:54
oraclelinux
oraclelinux
firefox security update
2009-02-04 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON
Related for NVD:CVE-2009-0354
cve1prion1mozilla1cvelist1ubuntucve1veracode1securityvulns2openvas27ubuntu1nessus13fedora40redhat1freebsd1centos1suse1oraclelinux1gentoo1