Published: 22/07/2009 Updated: 29/07/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Mozilla Firefox prior to 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote malicious users to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
fedoraproject fedora 10
suse linux enterprise debuginfo 10
suse linux enterprise debuginfo 11
opensuse opensuse 11.0
opensuse opensuse 11.1
suse linux enterprise desktop 10
suse linux enterprise desktop 11
suse linux enterprise server 10
suse linux enterprise server 11

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic Updated firefox packages that fix several security issues are now availablefor Red Hat Enterprise Linux 4 and 5This update has been rated as having critical security impact by the RedHat Security Response Team ...

Several flaws were discovered in the Firefox browser and JavaScript engines If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2009-2462, CVE-2009-2463, CVE-2009-2464, CVE-2009-2465, CVE-2009-2466, C ...

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2462 Martijn Wargers, Arno Renevier, Jesse Ruderman, Olli Pettay and Blake Kaplan discovered several issues in ...

Mozilla Foundation Security Advisory 2009-40 Multiple cross origin wrapper bypasses Announced July 21, 2009 Reporter moz_bug_r_a4 Impact High Products Firefox Fixed in Firefox 30 ...

CWE-79 https://bugzilla.mozilla.org/show_bug.cgi?id=479288 http://www.securityfocus.com/bid/35758 https://bugzilla.mozilla.org/show_bug.cgi?id=481434 http://www.mozilla.org/security/announce/2009/mfsa2009-40.html http://www.vupen.com/english/advisories/2009/1972 http://secunia.com/advisories/35914 https://bugzilla.mozilla.org/show_bug.cgi?id=497102 http://rhn.redhat.com/errata/RHSA-2009-1162.html http://secunia.com/advisories/35944 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 http://www.vupen.com/english/advisories/2009/2152 http://secunia.com/advisories/36145 http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html http://secunia.com/advisories/36005 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9497 https://access.redhat.com/errata/RHSA-2009:1162 https://usn.ubuntu.com/798-1/https://nvd.nist.gov

CVE-2009-2472

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect