10

CVE-2009-3079

Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 3.0.13
Mozilla ≫ Firefox Version0.1
Mozilla ≫ Firefox Version0.2
Mozilla ≫ Firefox Version0.3
Mozilla ≫ Firefox Version0.4
Mozilla ≫ Firefox Version0.5
Mozilla ≫ Firefox Version0.6
Mozilla ≫ Firefox Version0.6.1
Mozilla ≫ Firefox Version0.7
Mozilla ≫ Firefox Version0.7.1
Mozilla ≫ Firefox Version0.8
Mozilla ≫ Firefox Version0.9
Mozilla ≫ Firefox Version0.9 Updaterc
Mozilla ≫ Firefox Version0.9.1
Mozilla ≫ Firefox Version0.9.2
Mozilla ≫ Firefox Version0.9.3
Mozilla ≫ Firefox Version0.9_rc
Mozilla ≫ Firefox Version0.10
Mozilla ≫ Firefox Version0.10.1
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0 Updatepreview_release
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.4.1
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5 Updatebeta1
Mozilla ≫ Firefox Version1.5 Updatebeta2
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.0.12
Mozilla ≫ Firefox Version1.5.1
Mozilla ≫ Firefox Version1.5.2
Mozilla ≫ Firefox Version1.5.3
Mozilla ≫ Firefox Version1.5.4
Mozilla ≫ Firefox Version1.5.5
Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.7
Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version1.8
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0 Updatebeta_1
Mozilla ≫ Firefox Version2.0 Updatebeta1
Mozilla ≫ Firefox Version2.0 Updaterc2
Mozilla ≫ Firefox Version2.0 Updaterc3
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
Mozilla ≫ Firefox Version2.0.0.4
Mozilla ≫ Firefox Version2.0.0.5
Mozilla ≫ Firefox Version2.0.0.6
Mozilla ≫ Firefox Version2.0.0.7
Mozilla ≫ Firefox Version2.0.0.8
Mozilla ≫ Firefox Version2.0.0.9
Mozilla ≫ Firefox Version2.0.0.10
Mozilla ≫ Firefox Version2.0.0.11
Mozilla ≫ Firefox Version2.0.0.12
Mozilla ≫ Firefox Version2.0.0.13
Mozilla ≫ Firefox Version2.0.0.14
Mozilla ≫ Firefox Version2.0.0.15
Mozilla ≫ Firefox Version2.0.0.16
Mozilla ≫ Firefox Version2.0.0.17
Mozilla ≫ Firefox Version2.0.0.18
Mozilla ≫ Firefox Version2.0.0.19
Mozilla ≫ Firefox Version2.0.0.20
Mozilla ≫ Firefox Version2.0.0.21
Mozilla ≫ Firefox Version2.0_.1
Mozilla ≫ Firefox Version2.0_.4
Mozilla ≫ Firefox Version2.0_.5
Mozilla ≫ Firefox Version2.0_.6
Mozilla ≫ Firefox Version2.0_.7
Mozilla ≫ Firefox Version2.0_.9
Mozilla ≫ Firefox Version2.0_.10
Mozilla ≫ Firefox Version2.0_8
Mozilla ≫ Firefox Version3.0
Mozilla ≫ Firefox Version3.0 Updatealpha
Mozilla ≫ Firefox Version3.0 Updatebeta2
Mozilla ≫ Firefox Version3.0 Updatebeta5
Mozilla ≫ Firefox Version3.0.1
Mozilla ≫ Firefox Version3.0.2
Mozilla ≫ Firefox Version3.0.3
Mozilla ≫ Firefox Version3.0.4
Mozilla ≫ Firefox Version3.0.5
Mozilla ≫ Firefox Version3.0.6
Mozilla ≫ Firefox Version3.0.7
Mozilla ≫ Firefox Version3.0.8
Mozilla ≫ Firefox Version3.0.9
Mozilla ≫ Firefox Version3.0.10
Mozilla ≫ Firefox Version3.0.11
Mozilla ≫ Firefox Version3.0.12
Mozilla ≫ Firefox Version3.5
Mozilla ≫ Firefox Version3.5.1
Mozilla ≫ Firefox Version3.5.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.6% 0.8
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.