FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1311

This CVE name corresponds to:

Entered	Topic
2009-04-22	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-1311 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-1311
Phase	Assigned(20090416)

Description

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/2009/mfsa2009-21.html
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=471962
DEBIAN	DSA-1797
FEDORA	FEDORA-2009-3875
FEDORA	FEDORA-2009-7567
FEDORA	FEDORA-2009-7614
MANDRIVA	MDVSA-2009:111
REDHAT	RHSA-2009:0436
REDHAT	RHSA-2009:0437
SLACKWARE	SSA:2009-176-01
SUNALERT	264308
SUSE	SUSE-SR:2009:010
UBUNTU	USN-764-1
BID	34656
OVAL	oval:org.mitre.oval:def:10939
OVAL	oval:org.mitre.oval:def:6200
OVAL	oval:org.mitre.oval:def:6222
OVAL	oval:org.mitre.oval:def:7235
SECTRACK	1022097
SECUNIA	34758
SECUNIA	34894
SECUNIA	34843
SECUNIA	34844
SECUNIA	35065
SECUNIA	35042
SECUNIA	35561
SECUNIA	35882
VUPEN	ADV-2009-1125