NVD

Id
48095  
Name
CVE-2009-0776  
Description
nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-03-04  
Modified Date
2010-08-21  
Seq
2009-0776  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241361 48095 CVE-2009-0776 SUSE-SA:2009:012  View
241362 48095 CVE-2009-0776 SUSE-SA:2009:023  View
241363 48095 CVE-2009-0776 oval:org.mitre.oval:def:5956  View
241364 48095 CVE-2009-0776 oval:org.mitre.oval:def:6017  View
241365 48095 CVE-2009-0776 oval:org.mitre.oval:def:6191  View
241366 48095 CVE-2009-0776 oval:org.mitre.oval:def:7390  View
241367 48095 CVE-2009-0776 oval:org.mitre.oval:def:9241  View
241368 48095 CVE-2009-0776 SSA:2009-083-02  View
241369 48095 CVE-2009-0776 SSA:2009-083-03  View
241370 48095 CVE-2009-0776 http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm  View
241371 48095 CVE-2009-0776 http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document  View
241372 48095 CVE-2009-0776 DSA-1751  View
241373 48095 CVE-2009-0776 DSA-1830  View
241374 48095 CVE-2009-0776 MDVSA-2009:075  View
241375 48095 CVE-2009-0776 MDVSA-2009:083  View
241376 48095 CVE-2009-0776 http://www.mozilla.org/security/announce/2009/mfsa2009-09.html  View
241377 48095 CVE-2009-0776 RHSA-2009:0258  View
241378 48095 CVE-2009-0776 RHSA-2009:0315  View
241379 48095 CVE-2009-0776 RHSA-2009:0325  View
241380 48095 CVE-2009-0776 33990  View
241381 48095 CVE-2009-0776 1021797  View
241382 48095 CVE-2009-0776 USN-741-1  View
241383 48095 CVE-2009-0776 ADV-2009-0632  View
241384 48095 CVE-2009-0776 https://bugzilla.mozilla.org/show_bug.cgi?id=414540  View
241385 48095 CVE-2009-0776 FEDORA-2009-2882  View
241386 48095 CVE-2009-0776 FEDORA-2009-2884  View
241387 48095 CVE-2009-0776 FEDORA-2009-3101  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40107 JVNDB-2009-001113 複数の Mozilla 製品における XML データを読み取り可能な脆弱性 複数の Mozilla 製品の nsIRDFService には、同一生成元ポリシーを回避し、別ドメインから XML データを読み取り可能な脆弱性が存在します。 CVE-2009-0776 38207 CVE-2009-0776 48095 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001113.html 2009-03-04 2009-04-01 View