The nsDocument::SetScriptGlobalObject function in content/base/src/nsDocument.cpp in Mozilla Firefox 3.5.x before 3.5.2, when certain add-ons are enabled, does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper.
http://secunia.com/advisories/36126
http://sunsolve.sun.com/search/document.do?assetkey=1-66-266148-1
http://www.mozilla.org/security/announce/2009/mfsa2009-46.html
http://www.securityfocus.com/bid/35928
http://www.vupen.com/english/advisories/2009/2142
https://bugzilla.mozilla.org/show_bug.cgi?id=498897
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00198.html
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00261.html
OR
cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*
ID | Name | Product | Family | Severity |
---|---|---|---|---|
67922 | Oracle Linux 4 / 5 : firefox (ELSA-2009-1430) | Nessus | Oracle Linux Local Security Checks | critical |
63402 | GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST) | Nessus | Gentoo Local Security Checks | critical |
40932 | CentOS 4 / 5 : firefox / seamonkey (CESA-2009:1430) | Nessus | CentOS Local Security Checks | critical |
40921 | RHEL 4 / 5 : firefox (RHSA-2009:1430) | Nessus | Red Hat Local Security Checks | critical |
40484 | Fedora 10 : Miro-2.0.5-3.fc10 / blam-1.8.5-13.fc10 / epiphany-2.24.3-9.fc10 / etc (2009-8288) | Nessus | Fedora Local Security Checks | critical |
40483 | Fedora 11 : kazehakase-0.5.6-11.svn3771_trunk.fc11.4 / Miro-2.0.5-3.fc11 / blam-1.8.5-13.fc11 / etc (2009-8279) | Nessus | Fedora Local Security Checks | critical |
801244 | Mozilla Firefox 3.5 < 3.5.2 Proxy Response DoS | Log Correlation Engine | Web Clients | high |
5116 | Mozilla Firefox 3.5.x < 3.5.2 Privilege Escalation | Nessus Network Monitor | Web Clients | medium |
40479 | Firefox 3.5.x < 3.5.2 Multiple Vulnerabilities | Nessus | Windows | high |