CVE-2009-3010 Detail

CVE-2009-3010

CVE Descriptions

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: in some product versions, the JavaScript executes outside of the context of the HTTP site.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version To (including) 3.0.13

Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version 0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 0.6.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 0.7.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.2 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.3 (Open CPE detail)
Mozilla>>Firefox >> Version 0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 0.10.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.4.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.12 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.8 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.12 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.13 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.14 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.15 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.16 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.17 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.18 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.19 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.20 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.12 (Open CPE detail)
Mozilla>>Firefox >> Version 3.0.13 (Open CPE detail)

Mozilla>>Firefox >> Version 3.5

Mozilla>>Firefox >> Version 3.5 (Open CPE detail)

Mozilla>>Firefox >> Version 3.6

Mozilla>>Firefox >> Version 3.6 (Open CPE detail)

Mozilla>>Firefox >> Version 3.7

Mozilla>>Firefox >> Version 3.7 (Open CPE detail)

Mozilla>>Mozilla >> Version To (including) 1.7.12

Mozilla>>Mozilla >> Version - (Open CPE detail)
Mozilla>>Mozilla >> Version 0.8 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.2.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.3 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.4 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.4.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.5 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.6 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.8 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.9 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.35 (Open CPE detail)
Mozilla>>Mozilla >> Version 0.9.48 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.0 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.0.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.0.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.2.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.3 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.3.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.4 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.4 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.4 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.4.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.4.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.4.4 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.5 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.5 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.5 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.5 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.5.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.6 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.6 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.6 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.1 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.2 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.3 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.4 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.5 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.6 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.7 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.8 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.9 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.10 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.11 (Open CPE detail)
Mozilla>>Mozilla >> Version 1.7.12 (Open CPE detail)

Mozilla>>Seamonkey >> Version 1.1.17

Mozilla>>Seamonkey >> Version 1.1.17 (Open CPE detail)

References

http://websecurity.com.ua/3386/
Tags : x_refsource_MISC

http://websecurity.com.ua/3315/
Tags : x_refsource_MISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/52999
Tags : vdb-entry, x_refsource_XF

CVE-2009-3010 : Detail