CVE-2009-1840: CVE-2009-1840

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-1840

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web script or an advertisement in a web page.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Mozilla Firefox "XUL"文件安全绕过和访问控制漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Firefox是Mozilla所发布的开源WEB浏览器。 Firefox中的多个安全漏洞,由于代码共享，Thunderbird和SeaMonkey也受这些漏洞的影响。Firefox加载XUL脚本的方式存在权限提升漏洞，在没有发生某些策略检查时Firefox和某些附件组件可能加载恶意内容。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2009-1840

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2009-1840

Please Login to view more intelligence information

https://bugzilla.redhat.com/show_bug.cgi?id=503582x_refsource_CONFIRM
http://www.mozilla.org/security/announce/2009/mfsa2009-31.htmlx_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=477979x_refsource_CONFIRM
http://secunia.com/advisories/35439third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/35326vdb-entryx_refsource_BID
http://secunia.com/advisories/35440third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35431third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35331third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/55158vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/35415third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35468third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1vendor-advisoryx_refsource_SUNALERT
http://www.securitytracker.com/id?1022379vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2009/dsa-1820vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2009/1572vdb-entryx_refsource_VUPEN
https://rhn.redhat.com/errata/RHSA-2009-1095.htmlvendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141vendor-advisoryx_refsource_MANDRIVA
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468vendor-advisoryx_refsource_SLACKWARE
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.htmlvendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.htmlvendor-advisoryx_refsource_FEDORA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9448vdb-entrysignaturex_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilities/51076vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-1840

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2009-1840

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2009-1840

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2009-1840

III. Intelligence Information for CVE-2009-1840

IV. Related Vulnerabilities

V. Comments for CVE-2009-1840

Leave a comment