NetSight
IP …
high7.1

CVE-2009-0776

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin polic…

Impact

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.0.6
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaSeamonkey
through 1.1.14
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.5
MozillaThunderbird
through 2.0.0.20
Versions 2.0.0.0, 2.0.0.4, 2.0.0.5, 2.0.0.6, 2.0.0.9

Weakness classification

CWE-200

References