NVD

Id
51252  
Name
CVE-2009-4102  
Description
Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-29  
Modified Date
2011-09-09  
Seq
2009-4102  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259951 51252 CVE-2009-4102 http://forums.mozillazine.org/viewtopic.php?f=48&t=1603515&start=0  View
259952 51252 CVE-2009-4102 JVN#99203127  View
259953 51252 CVE-2009-4102 JVNDB-2011-000070  View
259954 51252 CVE-2009-4102 DSA-1951  View
259955 51252 CVE-2009-4102 http://www.net-security.org/secworld.php?id=8527  View
259956 51252 CVE-2009-4102 37120  View
259957 51252 CVE-2009-4102 ADV-2009-3324  View
259958 51252 CVE-2009-4102 sage-description-xss(54396)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30722 JVNDB-2011-000070 Sage において任意のスクリプトが実行される脆弱性 Sage には任意のスクリプトが実行される脆弱性が存在します。 CVE-2009-4102 41533 CVE-2009-4102 51252 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000070.html 2011-09-02 2011-09-02 View