Lucene search
RootSSV:19160HistoryFeb 20, 2010 - 12:00 a.m.
Firefox showModalDialog()方法跨域脚本执行漏洞
2010-02-2000:00:00
Root
www.seebug.org
39
0.013 Low
EPSS
Percentile
84.6%
CVE ID: CVE-2009-3988
Firefox是一款流行的开源WEB浏览器。
Firefox的同源策略实现上存在漏洞，远程攻击者可能通过使用showModalDialog() JavaScript方法绕过权限限制，获取其他浏览网面的信息。
利用此漏洞需要一定的用户交互发生。
Mozilla Firefox 3.0.x
厂商补丁：
Mozilla
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.mozilla.org/security/announce/2010/mfsa2010-04.html
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-04
2010-02-19 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-02-25 00:00:00
veracode
veracode
Authorization Bypass
2020-04-10 00:43:58
prion
prion
Cross site scripting
2010-02-22 13:00:00
mozilla
mozilla
XSS due to window.dialogArguments being readable cross-domain — Mozilla
2010-02-17 00:00:00
zdi
zdi
Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability
2010-02-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-3988
2010-02-17 00:00:00
cve
cve
CVE-2009-3988
2010-02-22 13:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities feb-10 (Linux)
2010-02-26 00:00:00
Mozilla Products Multiple Vulnerabilities (MFSA2010-05) - Linux
2010-02-26 00:00:00
Mozilla Products Multiple Vulnerabilities feb-10 (Windows)
2010-02-26 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: galeon-2.0.7-20.fc11
2010-02-20 00:15:26
[SECURITY] Fedora 11 Update: google-gadgets-0.11.1-5.fc11
2010-02-20 00:15:26
[SECURITY] Fedora 12 Update: firefox-3.5.8-1.fc12
2010-02-20 00:29:04
nessus
nessus
SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 2033)
2010-02-25 00:00:00
Debian DSA-1999-1 : xulrunner - several vulnerabilities
2010-02-24 00:00:00
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6867)
2010-10-11 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-02-18 00:00:00
ubuntu
ubuntu
Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
2010-02-17 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2010-02-17 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-02-17 00:00:00
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:11:52
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:02:49
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
2010-02-18 20:05:36
suse
suse
remote code execution in MozillaFirefox,seamonkey
2010-03-04 16:53:48
redhat
redhat
(RHSA-2010:0112) Critical: firefox security update
2010-02-17 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-02-17 00:00:00
centos
centos
firefox, xulrunner security update
2010-02-18 00:33:18
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00