FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-1841

This CVE name corresponds to:

Entered Topic
2009-06-12 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2009-1841
Phase Assigned(20090529)

Description

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2009/mfsa2009-32.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=479560
CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=503583
DEBIAN DSA-1820
DEBIAN DSA-1830
FEDORA FEDORA-2009-6366
FEDORA FEDORA-2009-6411
FEDORA FEDORA-2009-7567
FEDORA FEDORA-2009-7614
MANDRIVA MDVSA-2009:141
REDHAT RHSA-2009:1095
REDHAT RHSA-2009:1096
SLACKWARE SSA:2009-167-01
SLACKWARE SSA:2009-176-01
SLACKWARE SSA:2009-178-01
SUNALERT 264308
UBUNTU USN-782-1
BID 35326
BID 35373
OSVDB 55159
OVAL oval:org.mitre.oval:def:9815
SECTRACK 1022397
SECUNIA 35331
SECUNIA 35428
SECUNIA 35431
SECUNIA 35439
SECUNIA 35440
SECUNIA 35468
SECUNIA 35536
SECUNIA 35415
SECUNIA 35561
SECUNIA 35602
SECUNIA 35882
VUPEN ADV-2009-1572