Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-0776

Опубликовано: 04 мар. 2009
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=488290Firefox XML data theft via RDFXMLDataSource and cross-domain redirect

EPSS

Процентиль: 74%
0.00865
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 16 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

nvd
больше 16 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

debian
больше 16 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0. ...

github
больше 3 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

oracle-oval
больше 16 лет назад

ELSA-2009-0315: firefox security update (CRITICAL)

EPSS

Процентиль: 74%
0.00865
Низкий

4.3 Medium

CVSS2