content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade seamonkey-nsprUpgrade seamonkey-nspr-develUpgrade seamonkey-develUpgrade seamonkey-nss-develUpgrade seamonkey-js-debuggerUpgrade nspr-develUpgrade seamonkey-dom-inspectorUpgrade firefoxUpgrade seamonkeyUpgrade seamonkey-nssUpgrade seamonkey-chatUpgrade nspr | Dec 1, 2016 | Oct 29, 2009 |
| Freebsd | — | Upgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade linux-seamonkey | Dec 10, 2025 | Oct 28, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird-bin.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/mozilla-thunderbird-bin. | Oct 30, 2017 | Oct 29, 2009 |
| Mfsa2009 61 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Oct 29, 2009 |
| Oracle_linux | — | Upgrade nspr-develUpgrade firefoxUpgrade nsprUpgrade xulrunner-devel-unstableUpgrade xulrunner-develUpgrade xulrunner | Oct 16, 2024 | Oct 29, 2009 |
| Suse | — | Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnomeUpgrade libidl-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-translationsUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-nss-32bitUpgrade libidlUpgrade mozilla-nspr-x86Upgrade libfreebl3Upgrade mozilla-xulrunner190Upgrade mozilla-xulrunner190-x86Upgrade mozilla-nspr-32bitUpgrade mozilla-nss-x86Upgrade gconf2-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-32bitUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192Upgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefox-translations-commonUpgrade libidl-x86Upgrade mozilla-xulrunner190-translationsUpgrade orbit2-32bitUpgrade gconf2-32bitUpgrade gconf2Upgrade mozilla-nss-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nssUpgrade mozilla-xulrunner191Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade mozilla-xulrunner191-gnomevfsUpgrade orbit2Upgrade libfreebl3-x86Upgrade mozilla-xulrunner192-x86Upgrade orbit2-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade abrowserUpgrade firefox-3.5Upgrade firefox-3.0Upgrade xulrunner-1.9.1Upgrade xulrunner-1.9 | Nov 8, 2024 | Oct 29, 2009 |
| Vmsa 2010 0001 1 Update For Service Console Packages Nss And Nspr | — | Upgrade VMware ESX 4.0 to build number 219382 | Sep 2, 2010 | Oct 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub