You are here

CVE-2009-3374

Vincent (CVE) Danen's picture
The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."

Details Source

Mitre

Public Date

2009-10-27 00:00:00

Impact

Critical

Bugzilla

CVE-2009-3374 Firefox chrome privilege escalation in XPCVariant::VariantDataToJS()

Bugzilla ID

530 157

CVSS Status

verified

Base Score

6.80

Base Metrics

AV:N/AC:M/Au:N/C:P/I:P/A:P

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 5 RHSA-2009:1530 2009-10-27
Red Hat Enterprise Linux 4 RHSA-2009:1530 2009-10-27

Affected Packages State

Platform Package State
Red Hat Enterprise Linux version 5 xulrunner 1.9.0.15-3.el5_4 Fixed
Red Hat Enterprise Linux version 5 nspr 4.7.6-1.el5_4 Fixed
Red Hat Enterprise Linux version 4 nspr 4.7.6-1.el4_8 Fixed