CVE-2009-4127

Опубликовано: 02 дек. 2009

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving unspecified Toolbar buttons and the eval function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Ссылки

http://secunia.com/advisories/37377
Vendor Advisory
http://www.securityfocus.com/bid/37038
http://www.vupen.com/english/advisories/2009/3268
Vendor Advisory
https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2
http://secunia.com/advisories/37377
Vendor Advisory
http://www.securityfocus.com/bid/37038
http://www.vupen.com/english/advisories/2009/3268
Vendor Advisory
https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:wikipedia:wikipedia_toolbar:*:*:*:*:*:*:*:*

Версия до 0.5.9.1 (включая)

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.2:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.5:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.6:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.9:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.6:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.7:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.8:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.4:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.5:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.6:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.7:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.8:*:*:*:*:*:*:*

cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.9:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01236

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-5wgm-hp6v-w7qm

github

больше 3 лет назад