NetSight
IP …
critical9.3

CVE-2009-1841

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers t…

Impact

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.

Affected products

VendorProductAffected versions
MozillaFirefox
through 3.0.10
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaSeamonkey
through 1.1.16
Versions 1.0, 1.0.1, 1.0.3, 1.0.4, 1.0.6
MozillaThunderbird
through 2.0.0.19
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-94

References