Ubuntu.comUB:CVE-2009-3385CVE-2009-3385
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
0.041 Low
EPSS
Percentile
92.0%
The mail component in Mozilla SeaMonkey before 1.1.19 does not properly
restrict execution of scriptable plugin content, which allows user-assisted
remote attackers to obtain sensitive information via crafted content in an
IFRAME element in an HTML e-mail message, as demonstrated by a Flash object
that sends arbitrary local files during a reply or forward operation.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | < 2.0.8+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
Related
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
0.041 Low
EPSS
Percentile
92.0%