Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-0776

Опубликовано: 04 мар. 2009
Источник: redhat
CVSS2: 4.3

Описание

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=488290Firefox XML data theft via RDFXMLDataSource and cross-domain redirect

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 16 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

nvd
больше 16 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

debian
больше 16 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0. ...

github
около 3 лет назад

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

oracle-oval
больше 16 лет назад

ELSA-2009-0315: firefox security update (CRITICAL)

4.3 Medium

CVSS2