Back to feed
EUVD-2009-3957 · Published Dec 17, 2009
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.
Technologies
Mozilla FirefoxMozilla Seamonkey
Weaknesses
CWE-94
CVSS scores
- v2.07.6
AV:N/AC:H/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Stealth
References
Potentially impacted assets
See if this affects your attack surface
