CVE-2009-0355
published 2009-02-04CVE-2009-0355: components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration…
PriorityP425medium5.4CVSS 2.0
AVNACHAuNCCINAN
EPSS
1.64%
74.0th percentile
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
Affected
81 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | <= 3.0.5 | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
| mozilla | firefox | — | — |
CVSS provenance
nvdv2.05.4MEDIUMAV:N/AC:H/Au:N/C:C/I:N/A:N
vendor_ubuntu10.0CRITICAL
vendor_redhat5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox and Xulrunner vulnerabilities
vendor_ubuntu·2009-02-10·CVSS 10.0
CVE-2009-0352 [CRITICAL] Firefox and Xulrunner vulnerabilities
Title: Firefox and Xulrunner vulnerabilities
Summary: Firefox and Xulrunner vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow
an attacker to crash the browser and possibly execute arbitrary code with user
privileges. (CVE-2009-0352, CVE-2009-0353)
A flaw was discovered in the JavaScript engine. An attacker could bypass the
same-origin policy in Firefox by utilizing a chrome XBL method and execute
arbitrary JavaScript within the context of another website. (CVE-2009-0354)
A flaw was discovered in the browser engine when restoring closed tabs. If a
user were tricked into restoring a tab to a malicious website with form input
controls, an attacker could steal local files on the user's system.
(CVE-2009-0355)
Wladimir Palant discovered that Fi
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2009-02-10·CVSS 5.4
CVE-2009-0355 [MEDIUM] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox vulnerabilities
A flaw was discovered in the browser engine when restoring closed tabs. If a
user were tricked into restoring a tab to a malicious website with form input
controls, an attacker could steal local files on the user's system.
(CVE-2009-0355)
Wladimir Palant discovered that Firefox did not restrict access to cookies in
HTTP response headers. If a user were tricked into opening a malicious web
page, a remote attacker could view sensitive information. (CVE-2009-0357)
Instructions: After a standard system upgrade you need to restart Firefox to effect the
necessary changes.
Red Hat
Firefox local file stealing with SessionStore
vendor_redhat·2009-02-03·CVSS 5.4
CVE-2009-0355 [MEDIUM] Firefox local file stealing with SessionStore
Firefox local file stealing with SessionStore
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
GHSA
GHSA-h2q7-pj3w-pr6f: components/sessionstore/src/nsSessionStore
ghsa_unreviewed·2022-05-02
CVE-2009-0355 [MEDIUM] GHSA-h2q7-pj3w-pr6f: components/sessionstore/src/nsSessionStore
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0256.htmlhttp://secunia.com/advisories/33799http://secunia.com/advisories/33808http://secunia.com/advisories/33809http://secunia.com/advisories/33816http://secunia.com/advisories/33831http://secunia.com/advisories/33841http://secunia.com/advisories/33846http://secunia.com/advisories/33869http://secunia.com/advisories/34324http://secunia.com/advisories/34417http://support.avaya.com/elmodocs2/security/ASA-2009-040.htmhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:044http://www.mozilla.org/security/announce/2009/mfsa2009-03.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0257.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0258.htmlhttp://www.securityfocus.com/bid/33598http://www.securitytracker.com/id?1021665http://www.ubuntu.com/usn/usn-717-1http://www.ubuntu.com/usn/usn-717-2http://www.vupen.com/english/advisories/2009/0313https://bugzilla.mozilla.org/show_bug.cgi?id=466937https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0256.htmlhttp://secunia.com/advisories/33799http://secunia.com/advisories/33808http://secunia.com/advisories/33809http://secunia.com/advisories/33816http://secunia.com/advisories/33831http://secunia.com/advisories/33841http://secunia.com/advisories/33846http://secunia.com/advisories/33869http://secunia.com/advisories/34324http://secunia.com/advisories/34417http://support.avaya.com/elmodocs2/security/ASA-2009-040.htmhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:044http://www.mozilla.org/security/announce/2009/mfsa2009-03.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0257.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0258.htmlhttp://www.securityfocus.com/bid/33598http://www.securitytracker.com/id?1021665http://www.ubuntu.com/usn/usn-717-1http://www.ubuntu.com/usn/usn-717-2http://www.vupen.com/english/advisories/2009/0313https://bugzilla.mozilla.org/show_bug.cgi?id=466937https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html
2009-02-04
Published