exploitDog

CVE-2009-1839

Опубликовано: 11 июн. 2009

Источник: redhat

CVSS2: 1.2

EPSS Средний

Описание

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=503581Firefox information disclosure flaw

EPSS

Процентиль: 94%

0.15161

Средний

1.2 Low

CVSS2

Связанные уязвимости

CVE-2009-1839

ubuntu

около 16 лет назад

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.

CVE-2009-1839

nvd

около 16 лет назад

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.

CVE-2009-1839

debian

около 16 лет назад

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with ...

GHSA-mx4x-6484-3f7v

github

около 3 лет назад

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.

ELSA-2009-1095

oracle-oval

около 16 лет назад

ELSA-2009-1095: firefox security update (CRITICAL)

EPSS

Процентиль: 94%

0.15161

Средний

1.2 Low

CVSS2