Lucene search
Ubuntu.comUB:CVE-2009-3988HistoryFeb 17, 2010 - 12:00 a.m.
CVE-2009-3988
2010-02-1700:00:00
ubuntu.com
ubuntu.com
19
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.013 Low
EPSS
Percentile
86.0%
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey
before 2.0.3, does not properly restrict read access to object properties
in showModalDialog, which allows remote attackers to bypass the Same Origin
Policy and conduct cross-site scripting (XSS) attacks via crafted
dialogArguments values.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | seamonkey | <Â 2.0.8+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | seamonkey | <Â 2.0.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | seamonkey | <Â 2.0.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | seamonkey | <Â 2.0.8+build1+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | xulrunner-1.9 | <Â 1.9.0.18+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | xulrunner-1.9 | <Â 1.9.0.18+build1+nobinonly-0ubuntu0.8.10.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | xulrunner-1.9 | <Â 1.9.0.18+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | xulrunner-1.9.1 | <Â 1.9.1.8+build1+nobinonly-0ubuntu0.9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | xulrunner-1.9.1 | <Â 1.9.1.8+build1+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
References
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-04
2010-02-19 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2010-02-25 00:00:00
veracode
veracode
Authorization Bypass
2020-04-10 00:43:58
prion
prion
Cross site scripting
2010-02-22 13:00:00
mozilla
mozilla
XSS due to window.dialogArguments being readable cross-domain â Mozilla
2010-02-17 00:00:00
zdi
zdi
Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability
2010-02-19 00:00:00
cve
cve
CVE-2009-3988
2010-02-22 13:00:00
seebug
seebug
Firefox showModalDialog()ćšćłčˇ¨ĺčćŹć§čĄćźć´
2010-02-20 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities feb-10 (Linux)
2010-02-26 00:00:00
Mozilla Products Multiple Vulnerabilities (MFSA2010-05) - Linux
2010-02-26 00:00:00
Mozilla Products Multiple Vulnerabilities feb-10 (Windows)
2010-02-26 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: galeon-2.0.7-20.fc11
2010-02-20 00:15:26
[SECURITY] Fedora 11 Update: mozvoikko-0.9.7-0.11.rc1.fc11
2010-02-20 00:15:26
[SECURITY] Fedora 11 Update: google-gadgets-0.11.1-5.fc11
2010-02-20 00:15:26
nessus
nessus
SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 2033)
2010-02-25 00:00:00
Debian DSA-1999-1 : xulrunner - several vulnerabilities
2010-02-24 00:00:00
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6867)
2010-10-11 00:00:00
osv
osv
xulrunner - several vulnerabilities
2010-02-18 00:00:00
ubuntu
ubuntu
Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
2010-02-17 00:00:00
Firefox 3.0 and Xulrunner 1.9 vulnerabilities
2010-02-17 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-02-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey
2010-03-04 16:53:48
debian
debian
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:02:49
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
2010-02-18 20:05:36
[Backports-security-announce] Security Update for xulrunner
2010-03-09 15:11:52
redhat
redhat
(RHSA-2010:0112) Critical: firefox security update
2010-02-17 00:00:00
oraclelinux
oraclelinux
firefox security update
2010-02-17 00:00:00
centos
centos
firefox, xulrunner security update
2010-02-18 00:33:18
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.013 Low
EPSS
Percentile
86.0%
Related for UB:CVE-2009-3988