CVE-2009-3007
EUVD-2009-299228.08.2009, 15:30
Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| flock | flock | 2.5.1 |
| mozilla | firefox | 3.5.1 |
| mozilla | seamonkey | 1.1.7 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| seamonkey |
| ||||||||||||||||||||||||||
| xulrunner-1.9.1 |
|