Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-3986

Опубликовано: 15 дек. 2009
Источник: redhat
CVSS2: 5.1
EPSS Низкий

Описание

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=546724Mozilla Chrome privilege escalation via window.opener

EPSS

Процентиль: 84%
0.0243
Низкий

5.1 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 15 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.

nvd
больше 15 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.

debian
больше 15 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey be ...

github
около 3 лет назад

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.

oracle-oval
больше 15 лет назад

ELSA-2009-1674: firefox security update (CRITICAL)

EPSS

Процентиль: 84%
0.0243
Низкий

5.1 Medium

CVSS2