Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yoono扩展DOM事件处理器跨域脚本攻击漏洞
Vulnerability Description
Yoono是一个简单易用的Firefox侧栏，允许用户方便的连接到Facebook、MySpace等社会网络和AIM等即时聊天工具。 基于Firefox的Yoono扩展6.1.1之前版本以chrome权限执行了某些操作。用户辅助远程攻击可借助DOM事件处理器（如装载）执行任意命令并执行跨域脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A