CVE-2009-2665

CVE-2009-2665 affects Mozilla Firefox 3.5.x up to 3.5.1; the flaw arises in nsDocument::SetScriptGlobalObject when certain add-ons are enabled and a crafted Link HTTP header is processed. This allows remote attackers to execute arbitrary JavaScript with chrome privileges via a malicious page, due...