Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1308

Опубликовано: 21 апр. 2009
Источник: redhat
CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.

Ссылки на источники

Дополнительная информация

Статус:

Low
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=496266Firefox XSS hazard using third-party stylesheets and XBL bindings

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2009-1308

ubuntu
больше 16 лет назад

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.

nvd логотип

CVE-2009-1308

nvd
больше 16 лет назад

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.

debian логотип

CVE-2009-1308

debian
больше 16 лет назад

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0 ...

github логотип

GHSA-chqp-7f63-6c5w

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.

oracle-oval логотип

ELSA-2009-0436

oracle-oval
больше 16 лет назад

ELSA-2009-0436: firefox security update (CRITICAL)

4.3 Medium

CVSS2