NVD

Id
48594  
Name
CVE-2009-1307  
Description
The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-22  
Modified Date
2010-08-21  
Seq
2009-1307  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245166 48594 CVE-2009-1307 SUSE-SR:2009:010  View
245167 48594 CVE-2009-1307 oval:org.mitre.oval:def:10972  View
245168 48594 CVE-2009-1307 oval:org.mitre.oval:def:5933  View
245169 48594 CVE-2009-1307 oval:org.mitre.oval:def:6154  View
245170 48594 CVE-2009-1307 oval:org.mitre.oval:def:6266  View
245171 48594 CVE-2009-1307 oval:org.mitre.oval:def:7008  View
245172 48594 CVE-2009-1307 RHSA-2009:0437  View
245173 48594 CVE-2009-1307 SSA:2009-176-01  View
245174 48594 CVE-2009-1307 264308  View
245175 48594 CVE-2009-1307 DSA-1797  View
245176 48594 CVE-2009-1307 DSA-1830  View
245177 48594 CVE-2009-1307 MDVSA-2009:111  View
245178 48594 CVE-2009-1307 MDVSA-2009:141  View
245179 48594 CVE-2009-1307 http://www.mozilla.org/security/announce/2009/mfsa2009-17.html  View
245180 48594 CVE-2009-1307 RHSA-2009:0436  View
245181 48594 CVE-2009-1307 RHSA-2009:1125  View
245182 48594 CVE-2009-1307 RHSA-2009:1126  View
245183 48594 CVE-2009-1307 34656  View
245184 48594 CVE-2009-1307 1022093  View
245185 48594 CVE-2009-1307 SSA:2009-178-01  View
245186 48594 CVE-2009-1307 USN-782-1  View
245187 48594 CVE-2009-1307 USN-764-1  View
245188 48594 CVE-2009-1307 ADV-2009-1125  View
245189 48594 CVE-2009-1307 https://bugzilla.mozilla.org/show_bug.cgi?id=481342  View
245190 48594 CVE-2009-1307 FEDORA-2009-3875  View
245191 48594 CVE-2009-1307 FEDORA-2009-7567  View
245192 48594 CVE-2009-1307 FEDORA-2009-7614  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40268 JVNDB-2009-001274 複数の Mozilla 製品の view-source: URI 実装における同一生成元ポリシーを回避される脆弱性 複数の Mozilla 製品の view-source: URI 実装には、同一生成元ポリシーを正しく実行しないため、(1) bypass crossdomain.xml の制限を回避され、任意の Web サイトへ接続される、(2) Local Shared Objects を読まれる、作成される、改ざんされる、(3)コンテンツの描写制限を回避される脆弱性が存在します。 CVE-2009-1307 38738 CVE-2009-1307 48594 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001274.html 2009-04-21 2009-07-07 View