Security Advisory

CVE-2009-3385

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-03-22 17:23:00

Last updated 2024-08-07 06:22:24

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.

← Browse all CVEs View on cve.org ↗