CVE-2009-4630

EPSS 0.23%
Veröffentlicht 29.01.2010 18:30:00
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests.  NOTE: the vendor disputes the significance of this issue, stating "I don't think we necessarily need to worry about that case."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox

Mozilla ≫ Seamonkey

Mozilla ≫ Thunderbird

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.431

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://bugzilla.mozilla.org/show_bug.cgi?id=492196

https://bugzilla.mozilla.org/show_bug.cgi?id=453403

https://nvd.nist.gov/vuln/detail/CVE-2009-4630

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4630

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4630

EUVD