CVE-2009-3375

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1

http://www.mandriva.com/security/advisories?name=MDVSA-2009:294

http://www.mozilla.org/security/announce/2009/mfsa2009-61.html

http://www.vupen.com/english/advisories/2009/3334

https://bugzilla.mozilla.org/show_bug.cgi?id=503226

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10440

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5935

Details

Source: MITRE

Published: 2009-10-29

Updated: 2017-09-19

Type: CWE-264

Risk Information

CVSS v2

Base Score: 4.3

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM

Tenable Plugins

View all (30 total)

IDNameProductFamilySeverity
89735VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2010-0001) (remote check)NessusVMware ESX Local Security Checks
critical
67949Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1531)NessusOracle Linux Local Security Checks
critical
67948Oracle Linux 4 / 5 : firefox (ELSA-2009-1530)NessusOracle Linux Local Security Checks
critical
63402GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)NessusGentoo Local Security Checks
critical
60685Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64NessusScientific Linux Local Security Checks
critical
60683Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64NessusScientific Linux Local Security Checks
critical
49897SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6617)NessusSuSE Local Security Checks
critical
49887SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6609)NessusSuSE Local Security Checks
critical
48157Mandriva Linux Security Advisory : firefox (MDVSA-2009:294)NessusMandriva Local Security Checks
critical
44787Debian DSA-1922-1 : xulrunner - several vulnerabilitiesNessusDebian Local Security Checks
critical
43826VMSA-2010-0001 : ESX Service Console and vMA updates for nss and nsprNessusVMware ESX Local Security Checks
critical
42992Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)NessusMandriva Local Security Checks
critical
42474Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 regression (USN-853-2)NessusUbuntu Local Security Checks
critical
42391openSUSE Security Update : MozillaFirefox (MozillaFirefox-1499)NessusSuSE Local Security Checks
critical
42388openSUSE Security Update : MozillaFirefox (MozillaFirefox-1499)NessusSuSE Local Security Checks
critical
42383Fedora 10 : Miro-2.0.5-5.fc10 / blam-1.8.5-15.fc10 / epiphany-2.24.3-11.fc10 / etc (2009-10981)NessusFedora Local Security Checks
critical
42366SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6616)NessusSuSE Local Security Checks
critical
42365SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6606)NessusSuSE Local Security Checks
critical
42364SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 1493)NessusSuSE Local Security Checks
critical
42363SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1488)NessusSuSE Local Security Checks
critical
42335Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : firefox-3.0, firefox-3.5, xulrunner-1.9, xulrunner-1.9.1 vulnerabilities (USN-853-1)NessusUbuntu Local Security Checks
critical
42306Firefox 3.5.x < 3.5.4 Multiple VulnerabilitiesNessusWindows
high
42305Firefox < 3.0.15 Multiple VulnerabilitiesNessusWindows
high
42298FreeBSD : mozilla -- multiple vulnerabilities (c87aa2d2-c3c4-11de-ab08-000f20797ede)NessusFreeBSD Local Security Checks
critical
42297Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)NessusFedora Local Security Checks
critical
42296CentOS 3 / 4 : seamonkey (CESA-2009:1531)NessusCentOS Local Security Checks
critical
42295CentOS 4 : firefox (CESA-2009:1530)NessusCentOS Local Security Checks
critical
5218Mozilla Firefox < 3.0.15 / 3.5.4 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
medium
42288RHEL 3 / 4 : seamonkey (RHSA-2009:1531)NessusRed Hat Local Security Checks
critical
42287RHEL 4 / 5 : firefox (RHSA-2009:1530)NessusRed Hat Local Security Checks
critical