CVE-2009-3079

N/A Unknown
Published: September 10, 2009 Modified: April 23, 2026
View on NVD

Description

Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/36670
Source: secalert@redhat.com
http://secunia.com/advisories/36671
Source: secalert@redhat.com
http://secunia.com/advisories/36757
Source: secalert@redhat.com
http://secunia.com/advisories/37098
Source: secalert@redhat.com
http://www.mozilla.org/security/announce/2009/mfsa2009-51.html
Source: secalert@redhat.com
Vendor Advisory
http://www.securityfocus.com/bid/36343
Source: secalert@redhat.com
http://secunia.com/advisories/36670
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/36671
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/36757
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/37098
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2009/dsa-1886
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mozilla.org/security/announce/2009/mfsa2009-51.html
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2009-1430.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/36343
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1022873
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.mozilla.org/show_bug.cgi?id=454363
Source: af854a3a-2127-422b-91ae-364da2661108

26 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.5%
81th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

mozilla