content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade firefoxUpgrade nspr-develUpgrade seamonkey-chatUpgrade seamonkey-nssUpgrade nsprUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-nspr-develUpgrade seamonkey-mailUpgrade seamonkey-js-debugger | Dec 1, 2016 | Oct 29, 2009 |
| Freebsd | — | Upgrade firefoxUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade seamonkey | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade net-libs/xulrunner.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird. | Oct 30, 2017 | Oct 29, 2009 |
| Mfsa2009 61 | — | Upgrade to Mozilla Firefox version 3.0.15Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Oct 29, 2009 |
| Oracle_linux | — | Upgrade nspr-develUpgrade nsprUpgrade firefoxUpgrade xulrunner-develUpgrade xulrunnerUpgrade xulrunner-devel-unstable | Oct 16, 2024 | Oct 29, 2009 |
| Suse | — | Upgrade gconf2-x86Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192Upgrade mozilla-xulrunner192-gnomeUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner191-translationsUpgrade libidlUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nsprUpgrade mozilla-nss-32bitUpgrade libidl-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner192-32bitUpgrade mozilla-nss-x86Upgrade mozilla-xulrunner190-x86Upgrade libidl-x86Upgrade mozilla-xulrunner191Upgrade MozillaFirefox-develUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-nssUpgrade mozilla-xulrunner191-gnomevfsUpgrade MozillaFirefox-translations-commonUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-x86Upgrade gconf2Upgrade MozillaFirefox-branding-SLEDUpgrade orbit2-32bitUpgrade orbit2-x86Upgrade mozilla-xulrunner190-translationsUpgrade libfreebl3-x86Upgrade orbit2 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefox-3.5Upgrade xulrunner-1.9.1Upgrade firefox-3.0Upgrade xulrunner-1.9 | Nov 8, 2024 | Oct 29, 2009 |
| Vmsa 2010 0001 1 Update For Service Console Packages Nss And Nspr | — | Upgrade VMware ESX 4.0 to build number 219382 | Sep 2, 2010 | Oct 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub