NVD

Id
50479  
Name
CVE-2009-3274  
Description
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-21  
Modified Date
2010-08-21  
Seq
2009-3274  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255334 50479 CVE-2009-3274 http://jbrownsec.blogspot.com/2009/09/vamos-updates.html  View
255335 50479 CVE-2009-3274 oval:org.mitre.oval:def:9641  View
255336 50479 CVE-2009-3274 http://securitytube.net/Zero-Day-Demos-(Firefox-Vulnerability-Discovered)-video.aspx  View
255337 50479 CVE-2009-3274 272909  View
255338 50479 CVE-2009-3274 MDVSA-2009:294  View
255339 50479 CVE-2009-3274 http://www.mozilla.org/security/announce/2009/mfsa2009-53.html  View
255340 50479 CVE-2009-3274 RHSA-2010:0153  View
255341 50479 CVE-2009-3274 RHSA-2010:0154  View
255342 50479 CVE-2009-3274 ADV-2009-3334  View
255343 50479 CVE-2009-3274 ADV-2010-0650  View
255344 50479 CVE-2009-3274 https://bugzilla.mozilla.org/show_bug.cgi?id=514823  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41297 JVNDB-2009-002304 Mozilla Firefox におけるダウンロードファイルを置き換えられる脆弱性 Linux 上で稼働している Mozilla Firefox には、ダウンロード時のパス名が予測可能なため、ダウンロードが始まる前にファイルを配置することにより、ダウンロードファイルを置き換えられる脆弱性が存在します。 CVE-2009-3274 40705 CVE-2009-3274 50479 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002304.html 2009-09-21 2010-04-01 View