NVD

Id
49106  
Name
CVE-2009-1840  
Description
Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web script or an advertisement in a web page.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-12  
Modified Date
2010-08-21  
Seq
2009-1840  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248407 49106 CVE-2009-1840 oval:org.mitre.oval:def:9448  View
248408 49106 CVE-2009-1840 SSA:2009-167-01  View
248409 49106 CVE-2009-1840 264308  View
248410 49106 CVE-2009-1840 DSA-1820  View
248411 49106 CVE-2009-1840 MDVSA-2009:141  View
248412 49106 CVE-2009-1840 http://www.mozilla.org/security/announce/2009/mfsa2009-31.html  View
248413 49106 CVE-2009-1840 35326  View
248414 49106 CVE-2009-1840 1022379  View
248415 49106 CVE-2009-1840 ADV-2009-1572  View
248416 49106 CVE-2009-1840 firefox-xul-security-bypass(51076)  View
248417 49106 CVE-2009-1840 https://bugzilla.mozilla.org/show_bug.cgi?id=477979  View
248418 49106 CVE-2009-1840 https://bugzilla.redhat.com/show_bug.cgi?id=503582  View
248419 49106 CVE-2009-1840 RHSA-2009:1095  View
248420 49106 CVE-2009-1840 FEDORA-2009-6366  View
248421 49106 CVE-2009-1840 FEDORA-2009-6411  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40824 JVNDB-2009-001830 複数の Mozilla 製品におけるポリシーチェックの不備によるアクセス制限を回避される脆弱性 複数の Mozilla 製品には、XUL ドキュメントへスクリプトファイルをロードする前にコンテンツポリシーをチェックしないため、アクセス制限を回避される脆弱性が存在します。 CVE-2009-1840 39271 CVE-2009-1840 49106 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001830.html 2009-06-11 2009-07-30 View