Описание
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2009-2471
- https://bugzilla.mozilla.org/show_bug.cgi?id=460882
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10572
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2009-1162.html
- http://secunia.com/advisories/35914
- http://secunia.com/advisories/35944
- http://secunia.com/advisories/36005
- http://secunia.com/advisories/36145
- http://www.mozilla.org/security/announce/2009/mfsa2009-39.html
- http://www.securityfocus.com/bid/35758
- http://www.vupen.com/english/advisories/2009/1972
EPSS
CVE ID
Связанные уязвимости
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.
The setTimeout function in Mozilla Firefox before 3.0.12 does not prop ...
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS