NVD

Id
47687  
Name
CVE-2009-0355  
Description
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-02-04  
Modified Date
2011-09-12  
Seq
2009-0355  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238934 47687 CVE-2009-0355 SUSE-SA:2009:009  View
238935 47687 CVE-2009-0355 oval:org.mitre.oval:def:9161  View
238936 47687 CVE-2009-0355 RHSA-2009:0256  View
238937 47687 CVE-2009-0355 http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm  View
238938 47687 CVE-2009-0355 MDVSA-2009:044  View
238939 47687 CVE-2009-0355 http://www.mozilla.org/security/announce/2009/mfsa2009-03.html  View
238940 47687 CVE-2009-0355 RHSA-2009:0257  View
238941 47687 CVE-2009-0355 RHSA-2009:0258  View
238942 47687 CVE-2009-0355 33598  View
238943 47687 CVE-2009-0355 1021665  View
238944 47687 CVE-2009-0355 USN-717-1  View
238945 47687 CVE-2009-0355 USN-717-2  View
238946 47687 CVE-2009-0355 ADV-2009-0313  View
238947 47687 CVE-2009-0355 https://bugzilla.mozilla.org/show_bug.cgi?id=466937  View
238948 47687 CVE-2009-0355 FEDORA-2009-1399  View
238949 47687 CVE-2009-0355 FEDORA-2009-2882  View
238950 47687 CVE-2009-0355 FEDORA-2009-2884  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40031 JVNDB-2009-001037 Mozilla Firefox における INPUT 要素の処理に関連する任意のファイルを読まれる脆弱性 Mozilla Firefox には、閉じたタブを復元する際に INPUT 要素を type="file" に変更することをブロックしないため、任意のファイルを読まれる脆弱性が存在します。 CVE-2009-0355 37786 CVE-2009-0355 47687 5.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001037.html 2009-02-03 2009-03-27 View