Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-3985

Опубликовано: 15 дек. 2009
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=546726Mozilla URL spoofing via invalid document.location

EPSS

Процентиль: 71%
0.00692
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 15 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.

nvd
больше 15 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.

debian
больше 15 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey be ...

github
около 3 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.

oracle-oval
больше 15 лет назад

ELSA-2009-1674: firefox security update (CRITICAL)

EPSS

Процентиль: 71%
0.00692
Низкий

4.3 Medium

CVSS2