CVE-2009-3017

CVE-2009-3017 concerns Orca Browser 1.2 build 5. The issue is an improper handling of data: URIs and javascript: URIs in HTTP headers (Refresh and Location) and in 302 error documents, enabling cross-site scripting (XSS) via multiple header/URL vectors. The connected documents corroborate user-as...

CVE-2009-3014

This CVE (CVE-2009-3014) concerns multiple Mozilla products: Firefox up to 3.0.13 and earlier, plus versions in the 3.5, 3.6 a1 pre, and 3.7 a1 pre series; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier. The vulnerability arises from improper handling of javascript: URIs in HTML links inside 302...

CVE-2009-3014

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting...