Lucene search
Ubuntu.comUB:CVE-2009-3985HistoryDec 15, 2009 - 12:00 a.m.
CVE-2009-3985
2009-12-1500:00:00
ubuntu.com
ubuntu.com
8
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.0%
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before
2.0.1, allows remote attackers to associate spoofed content with an invalid
URL by setting document.location to this URL, and then writing arbitrary
web script or HTML to the associated blank document, a related issue to
CVE-2009-2654.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | seamonkey | <ย 2.0.8+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | seamonkey | <ย 2.0.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | <ย 2.0.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | <ย 2.0.8+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | xulrunner-1.9 | <ย 1.9.0.16+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | xulrunner-1.9 | <ย 1.9.0.16+nobinonly-0ubuntu0.8.10.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | xulrunner-1.9 | <ย 1.9.0.16+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | xulrunner-1.9.1 | <ย 1.9.1.6+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | xulrunner-1.9.1 | <ย 1.9.1.6+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2009-12-17 17:30:00
Design/Logic Flaw
2009-08-03 14:30:00
cve
cve
CVE-2009-3985
2009-12-17 17:30:00
CVE-2009-2654
2009-08-03 14:30:00
exploitpack
exploitpack
Mozilla Firefox - Location Bar Spoofing
2009-12-18 00:00:00
packetstorm
packetstorm
Mozilla Firefox Location Bar Spoof
2009-12-18 00:00:00
seebug
seebug
Firefoxๅ
ๅฎนๆณจๅ
ฅ็ฝ้กตๆฌบ้ชๆผๆด
2009-12-18 00:00:00
Mozilla Firefox Location Bar Spoofing Vulnerability
2009-12-18 00:00:00
veracode
veracode
Spoofed Content Association
2020-04-10 00:41:43
Spoofable Address Bar
2020-04-10 00:37:55
openvas
openvas
Ubuntu USN-811-1 (xulrunner-1.9)
2009-08-17 00:00:00
Ubuntu: Security Advisory (USN-811-1)
2009-08-17 00:00:00
Debian Security Advisory DSA 1873-1 (xulrunner)
2009-09-02 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 vulnerability (USN-811-1)
2009-08-05 00:00:00
Debian DSA-1873-1 : xulrunner - programming error
2010-02-24 00:00:00
Mandriva Linux Security Advisory : firefox (MDVSA-2009:339)
2009-12-23 00:00:00
debian
debian
[SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities
2009-08-26 18:51:42
[SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities
2009-12-16 21:15:39
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-44
2009-08-07 00:00:00
Mozilla Foundation Security Advisory 2009-69
2009-12-17 00:00:00
ubuntucve
ubuntucve
CVE-2009-2654
2009-08-03 00:00:00
mozilla
mozilla
Location bar and SSL indicator spoofing via window.open() on invalid URL โ Mozilla
2009-08-03 00:00:00
Location bar spoofing vulnerabilities โ Mozilla
2009-12-15 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerability
2009-08-08 00:00:00
Firefox 3.0 and Xulrunner 1.9 regression
2010-01-08 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2009-12-18 00:00:00
exploitdb
exploitdb
Mozilla Firefox - Location Bar Spoofing
2009-12-18 00:00:00
osv
osv
xulrunner - spoofing vulnerabilities
2009-08-26 00:00:00
xulrunner - several vulnerabilities
2009-12-16 00:00:00
redhat
redhat
(RHSA-2009:1431) Critical: seamonkey security update
2009-09-09 00:00:00
(RHSA-2009:1674) Critical: firefox security update
2009-12-16 00:00:00
(RHSA-2009:1432) Critical: seamonkey security update
2009-09-09 00:00:00
centos
centos
seamonkey security update
2009-09-10 22:51:03
firefox, xulrunner security update
2009-12-18 02:04:10
seamonkey security update
2009-09-10 11:03:30
oraclelinux
oraclelinux
seamonkey security update
2009-09-10 00:00:00
firefox security update
2009-12-16 00:00:00
firefox security update
2009-09-10 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: seamonkey-2.0.1-1.fc12
2009-12-18 04:36:12
[SECURITY] Fedora 11 Update: xulrunner-1.9.1.6-1.fc11
2009-12-18 04:32:41
[SECURITY] Fedora 11 Update: firefox-3.5.6-1.fc11
2009-12-18 04:32:41
freebsd
freebsd
mozilla -- multiple vulnerabilities
2009-12-16 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-12-22 15:19:49
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.0%
Related for UB:CVE-2009-3985