NVD

Id
47686  
Name
CVE-2009-0354  
Description
Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-02-04  
Modified Date
2011-09-12  
Seq
2009-0354  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238922 47686 CVE-2009-0354 SUSE-SA:2009:009  View
238923 47686 CVE-2009-0354 oval:org.mitre.oval:def:9796  View
238924 47686 CVE-2009-0354 RHSA-2009:0256  View
238925 47686 CVE-2009-0354 http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm  View
238926 47686 CVE-2009-0354 MDVSA-2009:044  View
238927 47686 CVE-2009-0354 http://www.mozilla.org/security/announce/2009/mfsa2009-02.html  View
238928 47686 CVE-2009-0354 33598  View
238929 47686 CVE-2009-0354 1021664  View
238930 47686 CVE-2009-0354 USN-717-1  View
238931 47686 CVE-2009-0354 ADV-2009-0313  View
238932 47686 CVE-2009-0354 https://bugzilla.mozilla.org/show_bug.cgi?id=468581  View
238933 47686 CVE-2009-0354 FEDORA-2009-1399  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40030 JVNDB-2009-001036 Mozilla Firefox におけるクローム XBL メソッドと window.eval 関数に関連するクロスサイトスクリプティングの脆弱性 Mozilla Firefox には、クローム XBL メソッドと window.eval 関数を組み合わせることにより、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-0354 37785 CVE-2009-0354 47686 2.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001036.html 2009-02-03 2009-02-27 View