CVE-2009-4100

The CVE-2009-4100 issue affects the Yoono extension for Firefox prior to version 6.1.1, where operations with chrome privileges allow user-assisted remote attackers to execute arbitrary commands and conduct cross-domain scripting via DOM event handlers (e.g., onload). Mitigation per sources is to...