CVE-2009-3985

Mozilla Firefox <3.0.16 & SeaMonkey <2.0.1 - XSS

Title source: llm
STIX 2.1

Description

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.

References (25)

Core 25
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-874-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-873-1
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2009_63_firefox.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1956
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1023343
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37704
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37699
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8480
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1023342
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/54808
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3547
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37881
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=514232
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37785
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=546726
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37813
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37349
Vendor Advisory vendor-advisory x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2009-1674.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37856
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37370
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9911

Scores

EPSS 0.0254
EPSS Percentile 83.2%

Details

Status published
Products (46)
mozilla/firefox 0.1
mozilla/firefox 0.2
mozilla/firefox 0.3
mozilla/firefox 0.4
mozilla/firefox 0.5
mozilla/firefox 0.6
mozilla/firefox 0.6.1
mozilla/firefox 0.7
mozilla/firefox 0.7.1
mozilla/firefox 0.8
... and 36 more
Published Dec 17, 2009
Tracked Since Feb 18, 2026