Логотип exploitDog
bind:CVE-2009-3988
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2009-3988

Количество 6

Количество 6

ubuntu логотип

CVE-2009-3988

около 16 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
EPSS: Низкий
redhat логотип

CVE-2009-3988

около 16 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2009-3988

около 16 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2009-3988

около 16 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMon ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-rjp9-ghg2-39qp

почти 4 года назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

EPSS: Низкий
oracle-oval логотип

ELSA-2010-0112

около 16 лет назад

ELSA-2010-0112: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
0%
Низкий
около 16 лет назад
redhat логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 4.3
0%
Низкий
около 16 лет назад
nvd логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
0%
Низкий
около 16 лет назад
debian логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMon ...

CVSS2: 5
0%
Низкий
около 16 лет назад
github логотип
GHSA-rjp9-ghg2-39qp

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

0%
Низкий
почти 4 года назад
oracle-oval логотип
ELSA-2010-0112

ELSA-2010-0112: firefox security update (CRITICAL)

около 16 лет назад

Уязвимостей на страницу