Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2009-1841

Опубликовано: 12 июн. 2009
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 9.3

Описание

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.

РелизСтатусПримечание
dapper

ignored

end of life
devel

not-affected

hardy

ignored

end of life
intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

not-affected

maverick

not-affected

natty

not-affected

oneiric

not-affected

Показывать по

РелизСтатусПримечание
dapper

ignored

end of life
devel

DNE

hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

released

1.1.17+nobinonly-0ubuntu1
hardy

released

1.1.17+nobinonly-0ubuntu0.8.04.1
intrepid

released

1.1.17+nobinonly-0ubuntu0.8.10.1
jaunty

released

1.1.17+nobinonly-0ubuntu0.9.04.1
karmic

released

1.1.17+nobinonly-0ubuntu1
lucid

released

1.1.17+nobinonly-0ubuntu1
maverick

released

1.1.17+nobinonly-0ubuntu1
natty

released

1.1.17+nobinonly-0ubuntu1
oneiric

released

1.1.17+nobinonly-0ubuntu1

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

released

2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
hardy

released

2.0.0.22+build1+nobinonly-0ubuntu0.8.04.1
intrepid

released

2.0.0.22+build1+nobinonly-0ubuntu0.8.10.1
jaunty

released

2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1
karmic

released

2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
lucid

released

2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
maverick

released

2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
natty

released

2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
oneiric

released

2.0.0.22+build1+nobinonly-0ubuntu1.nspr474

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

ignored

end of life
intrepid

ignored

end of life, was needed
jaunty

ignored

end of life
karmic

ignored

end of life
lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

released

1.9.0.11+build2+nobinonly-0ubuntu0.8.04.1
intrepid

released

1.9.0.11+build2+nobinonly-0ubuntu0.8.10.2
jaunty

released

1.9.0.11+build2+nobinonly-0ubuntu0.9.04.1
karmic

DNE

lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

DNE

hardy

DNE

intrepid

DNE

jaunty

released

1.9.1+nobinonly-0ubuntu0.9.04.1
karmic

released

1.9.1~rc2+nobinonly-0ubuntu1
lucid

DNE

maverick

DNE

natty

DNE

oneiric

DNE

Показывать по

EPSS

Процентиль: 88%
0.04241
Низкий

9.3 Critical

CVSS2

Связанные уязвимости

redhat
больше 16 лет назад

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.

nvd
больше 16 лет назад

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.

debian
больше 16 лет назад

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3 ...

github
больше 3 лет назад

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.

oracle-oval
больше 16 лет назад

ELSA-2009-1095: firefox security update (CRITICAL)

EPSS

Процентиль: 88%
0.04241
Низкий

9.3 Critical

CVSS2