5

CVE-2009-4630

EPSS 1.03%
Veröffentlicht 29.01.2010 18:30:00
Zuletzt bearbeitet 16.06.2026 23:14:03
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests.  NOTE: the vendor disputes the significance of this issue, stating "I don't think we necessarily need to worry about that case."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox

Mozilla ≫ Seamonkey

Mozilla ≫ Thunderbird

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.03%	0.59

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://bugzilla.mozilla.org/show_bug.cgi?id=492196

https://bugzilla.mozilla.org/show_bug.cgi?id=453403

https://nvd.nist.gov/vuln/detail/CVE-2009-4630

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4630

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4630

EUVD