CVE-2009-1835

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 12 Jun 2009, 21:07
Last modified:07 Aug 2024, 05:27

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
4.3 MEDIUM
v2.0 (nvd)
EPSS Score
1.55% LOW
2% probability +0.04%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

12 Jun 2009, 21:07
Published
Vulnerability first disclosed
07 Aug 2024, 05:27
Last Modified
Vulnerability information updated

Description

Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 1.55%• Percentile: 82%

Techniques & Countermeasures

  • CWE-200•Exposure of Sensitive Information to an Unauthorized Actor

    The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected Systems

  • mozilla•firefox

    ≤ 3.0.10 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.6.1 | 0.7 | 0.7.1 | 0.8 | 0.9 | 0.9:rc | 0.9.1 | 0.9.2 | 0.9.3 | 0.9_rc | 0.10 | 0.10.1 | 1.0 | 1.0:preview_release | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.4.1 | 1.5 | 1.5:beta1 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7 | 1.5.0.8 | 1.5.0.9 | 1.5.0.10 | 1.5.0.11 | 1.5.0.12 | 1.5.1 | 1.5.2 | 1.5.3 | 1.5.4 | 1.5.5 | 1.5.6 | 1.5.7 | 1.5.8 | 1.8 | 2.0 | 2.0:beta_1 | 2.0:beta1 | 2.0:rc2 | 2.0:rc3 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.7 | 2.0.0.8 | 2.0.0.9 | 2.0.0.10 | 2.0.0.11 | 2.0.0.12 | 2.0.0.13 | 2.0.0.14 | 2.0.0.15 | 2.0.0.16 | 2.0.0.17 | 2.0.0.18 | 2.0.0.19 | 2.0.0.20 | 2.0.0.21 | 2.0_.1 | 2.0_.4 | 2.0_.5 | 2.0_.6 | 2.0_.7 | 2.0_.9 | 2.0_.10 | 2.0_8 | 3.0 | 3.0:alpha | 3.0:beta2 | 3.0:beta5 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9

  • mozilla•seamonkey

    ≤ 1.1.16 | 1.0 | 1.0:alpha | 1.0:beta | 1.0.1 | 1.0.3 | 1.0.4 | 1.0.6 | 1.0.8 | 1.0.9 | 1.0.99 | 1.1 | 1.1:alpha | 1.1:beta | 1.1.1 | 1.1.3 | 1.1.5 | 1.1.5:1.1.10 | 1.1.6 | 1.1.7 | 1.1.8 | 1.1.9 | 1.1.10 | 1.1.11 | 1.1.12 | 1.1.13 | 1.1.15

References (28)