Логотип exploitDog
bind:CVE-2009-3988
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2009-3988

Количество 6

Количество 6

ubuntu логотип

CVE-2009-3988

больше 15 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
EPSS: Низкий
redhat логотип

CVE-2009-3988

больше 15 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2009-3988

больше 15 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2009-3988

больше 15 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMon ...

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-rjp9-ghg2-39qp

около 3 лет назад

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

EPSS: Низкий
oracle-oval логотип

ELSA-2010-0112

больше 15 лет назад

ELSA-2010-0112: firefox security update (CRITICAL)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
0%
Низкий
больше 15 лет назад
redhat логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 4.3
0%
Низкий
больше 15 лет назад
nvd логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

CVSS2: 5
0%
Низкий
больше 15 лет назад
debian логотип
CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMon ...

CVSS2: 5
0%
Низкий
больше 15 лет назад
github логотип
GHSA-rjp9-ghg2-39qp

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.

0%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2010-0112

ELSA-2010-0112: firefox security update (CRITICAL)

больше 15 лет назад

Уязвимостей на страницу