Security Advisory

CVE-2009-3986

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-12-17 17:00:00

Last updated 2024-08-07 06:45:50

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.

← Browse all CVEs View on cve.org ↗