5.8
CVE-2009-4130
- EPSS 0.99%
- Veröffentlicht 14.12.2009 17:30:00
- Zuletzt bearbeitet 16.06.2026 23:13:05
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.99% | 0.58 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:P
|
http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html
http://securitytracker.com/id?1023287
http://www.securityfocus.com/bid/37232
https://exchange.xforce.ibmcloud.com/vulnerabilities/54612