Логотип exploitDog
bind:CVE-2009-1307
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2009-1307

Количество 6

Количество 6

ubuntu логотип

CVE-2009-1307

почти 17 лет назад

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

CVSS2: 6.8
EPSS: Низкий
redhat логотип

CVE-2009-1307

почти 17 лет назад

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

CVSS2: 5.8
EPSS: Низкий
nvd логотип

CVE-2009-1307

почти 17 лет назад

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

CVSS2: 6.8
EPSS: Низкий
debian логотип

CVE-2009-1307

почти 17 лет назад

The view-source: URI implementation in Mozilla Firefox before 3.0.9, T ...

CVSS2: 6.8
EPSS: Низкий
github логотип

GHSA-5cxh-4rwm-2jh3

почти 4 года назад

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

EPSS: Низкий
oracle-oval логотип

ELSA-2009-0436

почти 17 лет назад

ELSA-2009-0436: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2009-1307

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

CVSS2: 6.8
1%
Низкий
почти 17 лет назад
redhat логотип
CVE-2009-1307

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

CVSS2: 5.8
1%
Низкий
почти 17 лет назад
nvd логотип
CVE-2009-1307

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

CVSS2: 6.8
1%
Низкий
почти 17 лет назад
debian логотип
CVE-2009-1307

The view-source: URI implementation in Mozilla Firefox before 3.0.9, T ...

CVSS2: 6.8
1%
Низкий
почти 17 лет назад
github логотип
GHSA-5cxh-4rwm-2jh3

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.

1%
Низкий
почти 4 года назад
oracle-oval логотип
ELSA-2009-0436

ELSA-2009-0436: firefox security update (CRITICAL)

почти 17 лет назад

Уязвимостей на страницу