4.3
CVE-2009-3008
- EPSS 0.79%
- Veröffentlicht 28.08.2009 15:30:00
- Zuletzt bearbeitet 16.06.2026 23:10:42
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginK-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary file: URL after a victim has visited any file: URL, as demonstrated by a visit to a file: document written by the attacker.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Christophe Thibault ≫ K-meleon Version1.5.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.79% | 0.514 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/53011