CVE-2009-0354

2009-02-0400:00:00

ubuntu.com

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.2%

JSON

Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x
before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and
access the properties of an arbitrary window and conduct cross-site
scripting (XSS) attacks, via vectors involving a chrome XBL method and the
window.eval function.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchfirefox-3.0< 3.0.6+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchfirefox-3.0< 3.0.6+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9< 1.9.0.6+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9< 1.9.0.6+nobinonly-0ubuntu0.8.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	firefox-3.0	< 3.0.6+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	firefox-3.0	< 3.0.6+nobinonly-0ubuntu0.8.10.1	UNKNOWN
ubuntu	8.04	noarch	xulrunner-1.9	< 1.9.0.6+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	xulrunner-1.9	< 1.9.0.6+nobinonly-0ubuntu0.8.10.1	UNKNOWN