CVE-2009-4127

wikipedia_toolbar < 0.5.9.2 - Remote Code Execution via Chrome Privilege Escalation

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving unspecified Toolbar buttons and the eval function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3268
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37377
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37038

Scores

EPSS 0.0496
EPSS Percentile 91.1%

Details

CWE
CWE-94
Status published
Products (26)
wikipedia/wikipedia_toolbar 0.2
wikipedia/wikipedia_toolbar 0.4
wikipedia/wikipedia_toolbar 0.4.1
wikipedia/wikipedia_toolbar 0.4.2
wikipedia/wikipedia_toolbar 0.4.4
wikipedia/wikipedia_toolbar 0.4.5
wikipedia/wikipedia_toolbar 0.4.6
wikipedia/wikipedia_toolbar 0.4.9
wikipedia/wikipedia_toolbar 0.5
wikipedia/wikipedia_toolbar 0.5.0.1
... and 16 more
Published Dec 02, 2009
Tracked Since Feb 18, 2026