NetSight
IP …
medium4.3

CVE-2009-1835

Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, wh…

Impact

Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.0.10
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaSeamonkey
through 1.1.16
Versions 1.0, 1.0.1, 1.0.3, 1.0.4, 1.0.6

Weakness classification

CWE-200

References