{"resultsPerPage":44,"startIndex":0,"totalResults":44,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-08T14:01:29.110","vulnerabilities":[{"cve":{"id":"CVE-2003-1492","sourceIdentifier":"cve@mitre.org","published":"2003-12-31T05:00:00.000","lastModified":"2026-06-16T22:04:32.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C632D06D-0172-46DA-A7F9-0BC484365BD7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/319919","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/7456","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11924","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/319919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/7456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-1970","sourceIdentifier":"cve@mitre.org","published":"2007-04-11T10:19:00.000","lastModified":"2026-06-16T22:38:39.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks."},{"lang":"es","value":"Mozilla Firefox no avisa al usuario sobre elementos HTTP en una página HTTPS cuando los elementos HTTP con creados dinámicamente por un document.write con efecto retardado, lo cual permite a atacantes remotos proporcionar contenido no autorizado y llevar a cabo ataques de phishing."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://osvdb.org/34536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/464719/100/0/threaded","source":"cve@mitre.org"},{"url":"http://osvdb.org/34536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464719/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2176","sourceIdentifier":"cve@mitre.org","published":"2007-04-24T16:19:00.000","lastModified":"2026-06-16T22:39:05.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors.  NOTE: this might be the same issue as CVE-2007-2175."},{"lang":"es","value":"Una vulnerabilidad no especificada en Mozilla Firefox, permite a atacantes remotos ejecutar código arbitrario por medio de vectores no especificados involucrando errores de Javascript. NOTA: este podría ser el mismo problema que CVE-2007-2175."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://osvdb.org/38857","source":"cve@mitre.org"},{"url":"http://www.matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won/","source":"cve@mitre.org"},{"url":"http://osvdb.org/38857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue is a flaw in the way Java and Quicktime interact.","lastModified":"2007-04-30T00:00:00"}]}},{"cve":{"id":"CVE-2007-3670","sourceIdentifier":"cve@mitre.org","published":"2007-07-10T19:30:00.000","lastModified":"2026-06-16T22:42:29.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe.  NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a \"defense in depth\" fix that will \"prevent IE from sending Firefox malicious data.\""},{"lang":"es","value":"Una vulnerabilidad de inyección de argumentos en Microsoft Internet Explorer, cuando es ejecutado en sistemas con Firefox instalado y ciertos URIs registrados, permiten a atacantes remotos conducir ataques de tipo cross-browser scripting y ejecutar comandos arbitrarios por medio de metacaracteres de shell en un URI (1) FirefoxURL o (2) FirefoxHTML, que son insertadas en la línea de comandos que son creadas cuando se invoca el archivo firefox.exe. NOTA: se ha debatido si el problema está en Internet Explorer o Firefox. A partir de 20070711, la opinión de este CVE es que IE parece estar fallando en la delimitación apropiada del argumento de la URL al invocar a Firefox, y este problema podría surgir también con otros manejadores de protocolos en IE. Sin embargo, Mozilla ha declarado que abordará el problema con una \"defense in depth\" que \"prevent IE from sending Firefox malicious data.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*","matchCriteriaId":"693D3C1C-E3E4-49DB-9A13-44ADDFF82507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*","matchCriteriaId":"D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6BC71FD8-D385-4507-BD14-B75FDD4C79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"ED471260-0272-431F-A91E-AC2883D92497"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"63D18070-EC48-4904-9AE0-558F7F3B869D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*","matchCriteriaId":"86584E3F-3B0D-4018-A186-E59F3B01CA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html","source":"cve@mitre.org"},{"url":"http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565","source":"cve@mitre.org"},{"url":"http://larholm.com/2007/07/10/internet-explorer-0day-exploit/","source":"cve@mitre.org"},{"url":"http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx","source":"cve@mitre.org"},{"url":"http://osvdb.org/38017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25984","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26149","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26258","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26271","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28179","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28363","source":"cve@mitre.org"},{"url":"http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/358017","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:152","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2007/mfsa2007-23.html","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2007/mfsa2007-40.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2007_49_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/473276/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/24837","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018351","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018360","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-503-1","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-199A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.virusbtn.com/news/virus_news/2007/07_11.xml","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2473","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2565","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4272","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0082","source":"cve@mitre.org"},{"url":"http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35346","source":"cve@mitre.org"},{"url":"ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://larholm.com/2007/07/10/internet-explorer-0day-exploit/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/38017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/26572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/358017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2007/mfsa2007-23.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2007/mfsa2007-40.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_49_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/473276/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/24837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-503-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-199A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.virusbtn.com/news/virus_news/2007/07_11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35346","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Successful exploit requires that Mozilla Firefox is installed."}},{"cve":{"id":"CVE-2007-3827","sourceIdentifier":"cve@mitre.org","published":"2007-07-17T21:30:00.000","lastModified":"2026-06-16T22:42:48.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox allows for cookies to be set with a null domain (aka \"domainless cookies\"), which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window."},{"lang":"es","value":"Mozilla Firefox permite que se escriban cookies con dominio nulo (también conocido como \"cookies sin dominio\"), lo cual permite a atacantes remotos pasar información entre dominios de su elección y llevar traza de la actividad del usuario, como se demuestra con el atributo dominio en la variable document.cookie en una ventana javascript:"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/2892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/473702/100/0/threaded","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/2892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/473702/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-4013","sourceIdentifier":"cve@mitre.org","published":"2007-07-26T01:30:00.000","lastModified":"2026-06-16T22:43:14.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint Analysis Client) in a Firefox plugin directory, and (3) a second npCtxCAO.dll (aka CCAOControl Object) before 4.5.0.0 in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 have unknown impact and attack vectors, possibly related to buffer overflows.  NOTE: vector 3 might overlap CVE-2007-3679."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Net6Helper.DLL (también conocido como Net6Launcher Class) 4.5.2 y anteriores, (2) npCtxCAO.dll (también conocido como Citrix Endpoint Analysis Client) en un extensión de directorio Firefox, y (3) un segundo  pCtxCAO.dll (también conocido como CCAOControl Object) anterior a 4.5.0.0 en Citrix Access Gateway Standard Edition anterior a 4.5.5 y Advanced Edition anterior a 4.5 HF1"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"DBDE442A-F7FC-4369-A28E-6C6AA8B999A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:hf1:advanced:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"7A132506-353D-4128-82A2-46DBC000B753"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:endpoint_analysis_client:*:*:*:*:*:*:*:*","matchCriteriaId":"DAAA6921-5794-4DF0-83DA-4A20DED53C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:*:standard:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"DBDE442A-F7FC-4369-A28E-6C6AA8B999A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_gateway:*:hf1:advanced:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"7A132506-353D-4128-82A2-46DBC000B753"}]}]}],"references":[{"url":"http://osvdb.org/37842","source":"cve@mitre.org"},{"url":"http://osvdb.org/37843","source":"cve@mitre.org"},{"url":"http://osvdb.org/37844","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX113815","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.citrix.com/article/CTX114028","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/24975","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/2583","source":"cve@mitre.org"},{"url":"http://osvdb.org/37842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/37843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/37844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX113815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.citrix.com/article/CTX114028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/24975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/2583","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Access Gateway is software offered also as an appliance."}},{"cve":{"id":"CVE-2007-5274","sourceIdentifier":"cve@mitre.org","published":"2007-10-08T23:17:00.000","lastModified":"2026-06-16T22:45:48.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273.  NOTE: this is similar to CVE-2007-5232."},{"lang":"es","value":"Sun Java Runtime Environment (JRE) en JDK y JRE versión 6 Update 2 y anteriores, JDK y JRE versión 5.0 Update 12 y anteriores, SDK y JRE versión 1.4.2_15 y anteriores, y SDK y JRE versión 1.3.1_20 y anteriores, cuando Firefox u Opera son usados, permite a los atacantes remotos violar el modelo de seguridad para las conexiones salientes de JavaScript por medio de un ataque de reconexión de DNS de múltiples pines dependiente de la API LiveConnect, en la que la descarga JavaScript depende de la resolución DNS del navegador, pero las operaciones socket de JavaScript se basan en una resolución DNS separada por una máquina virtual Java (JVM), un problema diferente al CVE-2007-5273. NOTA: este es igual al CVE-2007-5232."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","matchCriteriaId":"3D89F03D-7980-4385-8EE1-30A1B70EE257"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:update2:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"03E4E4BB-0526-42F9-9649-F10AEB4EBFE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"EE8E883F-E13D-4FB0-8C6F-B7628600E8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"2AADA633-EB11-49A0-8E40-66589034F03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"19DC29C5-1B9F-46DF-ACF6-3FF93E45777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"B120F7D9-7C1E-4716-B2FA-2990D449F754"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"28BE548B-DD0C-4C58-98CA-5B803F04F9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"5F8E9AA0-8907-4B1A-86A1-08568195217D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"A337AD31-4566-4A4E-AFF3-7EAECD5C90F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"0754AFDC-2F1C-4C06-AB46-457B5E610029"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"DC0ABF7A-107B-4B97-9BD7-7B0CEDAAF359"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"A5DA4242-30D9-44C8-9D0D-877348FFA22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"C61C6043-99D0-4F36-AF84-1A5F90B895EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"AD30DAEB-4893-41CF-A455-B69C463B9337"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*","matchCriteriaId":"1264A513-5AE3-4F0E-8387-1F75EBAEA241"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*","matchCriteriaId":"9C9F6EA8-6A88-4485-89A3-0FDF84AB51DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update20:*:*:*:*:*:*","versionEndIncluding":"1.3.1","matchCriteriaId":"A0B96904-0648-4A25-8A0D-6CD078748857"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update15:*:*:*:*:*:*","versionEndIncluding":"1.4.2","matchCriteriaId":"1D07A979-1ECC-4F1F-A7A0-F00FC7422CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:*:update2:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"D64D8A64-7079-403A-81BF-9D518E4A7752"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AAB87D43-2860-43DD-94EE-886D7D75A351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*","matchCriteriaId":"A06743B3-2637-47C2-BD1A-28D9F584ED75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*","matchCriteriaId":"F7F1CF2B-F0B6-45DD-88E1-C0BDF2B973BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update16:*:*:*:*:*:*","matchCriteriaId":"FD3AC618-7B66-4167-ABE5-87BE6907FB5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update18:*:*:*:*:*:*","matchCriteriaId":"2B0EAF17-18D3-45F2-9B6F-66BEC0F49FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update19:*:*:*:*:*:*","matchCriteriaId":"5F861B32-B878-4DFC-A9D1-350B1013AA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*","matchCriteriaId":"04FB9247-7DB5-46A1-9E99-C25A729FB5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D73559DD-54B4-4DF2-81BC-9109DB29DCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:*:*:*:*:*:*","matchCriteriaId":"58FC43CA-1F08-4A4B-838B-840838BC67FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*","matchCriteriaId":"1EEAB662-644A-4D7B-8237-64142CF48724"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*","matchCriteriaId":"D102063B-2434-4141-98E7-2DE501AE1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*","matchCriteriaId":"03B8CD03-CD31-4F4D-BA90-59435578A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"41A994BF-1F64-480A-8AA5-748DDD0AB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"88519F2D-AD06-4F05-BEDA-A09216F1B481"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"AC728978-368D-4B36-B149-70473E92BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"FD5187B1-CB86-48E8-A595-9FCFD9822C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"6C660DE4-543A-4E9B-825D-CD099D08CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*","matchCriteriaId":"A7FC09E8-7F30-4FE4-912E-588AA250E2A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*","matchCriteriaId":"A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*","matchCriteriaId":"9919D091-73D7-465A-80FF-F37D6CAF9F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*","matchCriteriaId":"02565D6F-4CB2-4671-A4EF-3169BCFA6154"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*","matchCriteriaId":"7EA5B9E9-654D-44F7-AE98-3D8B382804AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*","matchCriteriaId":"44051CFE-D15D-4416-A123-F3E49C67A9E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*","matchCriteriaId":"F296ACF3-1373-429D-B991-8B5BA704A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*","matchCriteriaId":"B863420B-DE16-416A-9640-1A1340A9B855"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*","matchCriteriaId":"724C972F-74FE-4044-BBC4-7E0E61FC9002"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*","matchCriteriaId":"46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*","matchCriteriaId":"EBE909DE-E55A-4BD3-A5BF-ADE407432193"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*","matchCriteriaId":"5DAC04D2-68FD-4793-A8E7-4690A543D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*","matchCriteriaId":"09027C19-D442-446F-B7A8-21DB6787CF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1_20","matchCriteriaId":"CBB8C5E3-C70C-46F6-897C-AB8D6470800E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*","matchCriteriaId":"A053DEF6-1317-4DA8-91D7-E1970DA62351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*","matchCriteriaId":"EB0605FF-3DDC-4F3A-8171-F3A447E9C292"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*","matchCriteriaId":"801FF3B4-0729-4710-BFC2-4B078029944F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*","matchCriteriaId":"DD02EBDF-6E51-4538-9EDD-B1DE914D09C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*","matchCriteriaId":"53C3C0E3-5F40-412B-A4AD-A7A291DE2A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*","matchCriteriaId":"36888382-79C8-4C97-A654-C668CD68556F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*","matchCriteriaId":"F34C99E6-F9F0-4EF3-8601-B47EAE3D7273"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*","matchCriteriaId":"A74DD08D-CEDB-460E-BED5-78F6CAF18BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*","matchCriteriaId":"E60560EC-6DBD-4A17-BFFA-FAD9193A0BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*","matchCriteriaId":"E4F64FBC-DC97-4FE3-A235-18B87945AF7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*","matchCriteriaId":"85048406-9051-4E69-94A8-5C449F3B89E7"}]}]}],"references":[{"url":"http://crypto.stanford.edu/dns/dns-rebinding.pdf","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/272","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27206","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27261","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27716","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28777","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1018771","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103078-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200041-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2007_55_java.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0963.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1041.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0132.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/482926/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25918","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10908","source":"cve@mitre.org"},{"url":"http://crypto.stanford.edu/dns/dns-rebinding.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev2dev.bea.com/pub/advisory/272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01234533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200804-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103078-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200041-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_55_java.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0132.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482926/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1856/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-6715","sourceIdentifier":"cve@mitre.org","published":"2008-04-17T22:05:00.000","lastModified":"2026-06-16T22:48:37.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox allows remote attackers to cause a denial of service (crash) via crafted image, as demonstrated by the zzuf lol-firefox.gif test case."},{"lang":"es","value":"Mozilla Firefox permite a atacantes remotos provocar una denegación de servicio (caída) mediante una imagen manipulada, como se demostró en la prueba de concepto zzuf lol-firefox.gif."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://hboeck.de/archives/578-How-long-does-it-take-to-fix-a-crash-bug.html","source":"cve@mitre.org"},{"url":"http://osvdb.org/44727","source":"cve@mitre.org"},{"url":"http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities","source":"cve@mitre.org"},{"url":"http://sam.zoy.org/zzuf/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27243","source":"cve@mitre.org"},{"url":"http://hboeck.de/archives/578-How-long-does-it-take-to-fix-a-crash-bug.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/44727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sam.zoy.org/zzuf/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27243","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this flaw a security issue. This flaw is not exploitable beyond causing the web browser to crash.","lastModified":"2008-04-22T00:00:00"}]}},{"cve":{"id":"CVE-2008-2399","sourceIdentifier":"cve@mitre.org","published":"2008-05-22T13:09:00.000","lastModified":"2026-06-16T22:53:42.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to create or overwrite arbitrary files via ..\\ (dot dot backslash) sequences in responses to (1) MLSD and (2) LIST commands, a related issue to CVE-2002-1345.  NOTE: this can be leveraged for code execution by writing to a Startup folder."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en el add-on FireFTP anterior a 0.98.20080518 para Firefox, permite a los servidores FTP remotos crear o sobreescribir ficheros de su eleccción a través de secuencias \"..\\\" (punto punto barra invertida) en respuesta a los comandos (1)MLSD y (2) LIST. Cuestión relativa al CVE-2002-2345. NOTA: esto puede aprovecharse para la ejecución de código mediante la escritura en la carpeta de inicio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fireftp:fireftp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.98","matchCriteriaId":"1648A444-E0E1-42E0-9ACD-375D1BE9CA62"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/30284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp0971-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/906907","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.58%3Br2=1.59%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29289","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1596/references","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42516","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp0971-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/906907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.58%3Br2=1.59%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1596/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4059","sourceIdentifier":"secalert@redhat.com","published":"2008-09-24T20:37:04.580","lastModified":"2026-06-16T22:57:04.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to \"pollute XPCNativeWrappers\" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element."},{"lang":"es","value":"El componente XPConnect en Firefox de Mozilla antes de 2.0.0.17 permite a atacantes remotos \"contaminar XPCNativeWrappers\" y ejecutar código de su elección con privilegios chrome mediante vectores relacionados con un elemento SCRIPT."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.17","matchCriteriaId":"102B1C57-CBEE-467E-A563-FDAC61598A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"}]}]}],"references":[{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31984","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31985","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32007","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32010","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32012","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32042","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32082","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32092","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32144","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32196","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32845","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33433","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34501","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31346","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1020915","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419848","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45352","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9529","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"secalert@redhat.com"},{"url":"http://download.novell.com/Download?buildid=WZXONb-tqBw~","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2008/mfsa2008-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0882.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0908.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1020915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-645-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-647-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=419848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-4821","sourceIdentifier":"cve@mitre.org","published":"2008-11-10T14:12:55.843","lastModified":"2026-06-16T22:58:36.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors."},{"lang":"es","value":"Adobe Flash Player 9.0.124.0 y anteriores, cuando se usa un navegador de Mozilla, no interpreta adecuadamente URLs jar:, lo que permite a atacantes obtener información sensible mediante vectores desconocidos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:camino:*:*:*:*:*:*:*:*","matchCriteriaId":"00F4BE3D-0CBC-4A26-AB40-994C11BC56CD"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.124.0","matchCriteriaId":"CE43678F-7BFF-43EF-8968-B440E2BEF76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*","matchCriteriaId":"A82D5B56-44E0-4120-B73E-0A1155AF4B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*","matchCriteriaId":"FC7DD938-F963-4E03-B66B-F00436E4EA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2A0777F-22C2-4FD5-BE81-8982BE6874D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*","matchCriteriaId":"5A37EB65-9EDD-41B0-ABEB-8A00232D8770"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*","matchCriteriaId":"600DDA9D-6440-48D1-8539-7127398A8678"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*","matchCriteriaId":"934A869D-D58D-4C36-B86E-013F62790585"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*","matchCriteriaId":"ACFA6611-99DA-48B0-89F7-DD99B8E30334"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*","matchCriteriaId":"59AF804B-BD7A-4AD7-AD44-B5D980443B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"91A2A8EA-455E-4E26-8D4A-56925A42F559"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F5D52F86-2E38-4C66-9939-7603367B8D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*","matchCriteriaId":"0557AA2A-FA3A-460A-8F03-DC74B149CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*","matchCriteriaId":"2FC04ABF-6191-4AA5-90B2-E7A97E6C6005"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"F22F1B02-CCF5-4770-A79B-1F58CA4321CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*","matchCriteriaId":"93957171-F1F4-43ED-A8B9-2D36C81EB1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*","matchCriteriaId":"7AE89894-E492-4380-8A2B-4CDD3A15667A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6ED706-BAF2-4795-B597-6F7EE8CA8911"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*","matchCriteriaId":"260E2CF6-4D15-4168-A933-3EC52D8F93FF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32702","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3338","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"cve@mitre.org"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/32129","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021149","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46534","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200903-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/32129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1021149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-350A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2008/3444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5697","sourceIdentifier":"cve@mitre.org","published":"2008-12-22T15:30:00.627","lastModified":"2026-06-16T23:00:49.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the clipboard via a string argument."},{"lang":"es","value":"El método skype_tool.copy_num en la extensión Skype BETA 2.2.0.95 para Firefox, permite a atacantes remotos escribir datos de su elección en el portapapeles a través de un argumento de cadena."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype:skype_extension_for_firefox:2.2.0.95:beta:*:*:*:*:*:*","matchCriteriaId":"3F2E5DBB-48BC-4157-B1DE-928297D81DE6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/4797","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31613","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45739","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6690","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0068","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T19:30:00.313","lastModified":"2026-06-16T23:04:12.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file."},{"lang":"es","value":"Error de interacción en xdg-open permite a atacantes remotos ejecutar código de su elección enviando un archivo con un tipo MIME peligroso pero utilizando un tipo seguro que Firefox envía a xdg-open, lo que provoca que xdg-open procese el archivo de tipo peligroso mediante una detección de tipo automática, como se demostró sobrescribiendo el archivo .desktop."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:xdg-utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5C9BD904-E0D0-4B42-A654-DB7C620C33DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2009/01/06/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33137","source":"secalert@redhat.com"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=19377","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=19377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1597","sourceIdentifier":"cve@mitre.org","published":"2009-05-11T15:30:00.437","lastModified":"2026-06-16T23:07:36.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.  NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\""},{"lang":"es","value":"Mozilla Firefox ejecuta llamadas a DOM en respuesta a un \"javascript: URI\" en el atributo target de un elemento submit en un formulario contenido en un fichero PDF, lo que podría permitir a atacantes remotos eludir las restricciones JavaScript al acceder al objeto de documento, como lo demuestran un sitio web que permite subir archivos PDF por usuarios no confiables, y por lo tanto disponer de un document.domain compartido entre el sitio web y este \"javascript: URI\". NOTA: El investigador informa de que la posición de Adobe es \"un archivo PDF es contenido activo\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6E2D0266-6954-4DBA-9EEE-8BF73B39DD61"}]}]}],"references":[{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"cve@mitre.org"},{"url":"http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/503183/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2011","sourceIdentifier":"cve@mitre.org","published":"2009-06-16T21:00:00.390","lastModified":"2026-06-16T23:08:34.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method."},{"lang":"es","value":"Worldweaver DX Studio Player v3.0.29.0, v3.0.22.0, v3.0.12.0, y probablemente otras versiones anteriores a la v3.0.29.1, cuando es utilizado como plug-in de Firefox, no restringe el acceso al metodo shell.execute JavaScript API, lo que permite a atacantes remotos ejecutar comandos arbitrarios a través de el fichero .dxstudio que invoca este método."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dxstudio:dx_studio_player:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.29.0","matchCriteriaId":"040E646F-230E-49F9-85F0-3349DC090ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dxstudio:dx_studio_player:3.0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"247B99AB-854D-4405-A9A1-1AD427052761"},{"vulnerable":true,"criteria":"cpe:2.3:a:dxstudio:dx_studio_player:3.0.22.0:*:*:*:*:*:*:*","matchCriteriaId":"1CCDE21B-3AE2-4AC5-B414-FC7052D13611"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/35402","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/DXStudio-player-firefox-plugin","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/504195/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35273","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1561","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51035","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8922","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.coresecurity.com/content/DXStudio-player-firefox-plugin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/504195/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2469","sourceIdentifier":"secalert@redhat.com","published":"2009-07-22T18:30:00.390","lastModified":"2026-06-16T23:09:31.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation."},{"lang":"es","value":"Mozilla Firefox anterior a la v3.0.12 no maneja adecuadamente un elemento SVG que posee una propiedad con una función \"watch\" y una función \"__defineSetter__\", lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente, la ejecución de código de su elección a través de un documento manipulado. Relacionado con la mal interpretación de ciertos punteros."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.11","matchCriteriaId":"CFF3C1ED-A009-4168-B928-F186006139BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9_rc:*:*:*:*:*:*:*","matchCriteriaId":"E15536D0-B6A3-4106-8196-021724324CAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"659F5DAF-D54F-43FB-AB2A-3FC7D456B434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta_1:*:*:*:*:*:*","matchCriteriaId":"F61EA4A1-1916-48A5-8196-E3CDEF3108F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"A956C036-1E47-49B2-A971-69868A510B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"F5AA254D-D41E-464F-9E2A-A950F08C6946"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B05D2655-6641-42BE-9793-30005AC9D40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.21:*:*:*:*:*:*:*","matchCriteriaId":"140EFF03-09CB-436E-AF3F-1CEEFF4D3F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"7A1DE6AC-C6AA-4B27-AC21-3293E5357A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"13AAF607-AEEE-4FAF-BE63-73B1D951EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*","matchCriteriaId":"20139741-10B1-4E4B-8D5F-A715042049C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35914","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36145","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-37.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=488995","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/35758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=488995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2404","sourceIdentifier":"secalert@redhat.com","published":"2009-08-03T14:30:00.610","lastModified":"2026-06-16T23:09:22.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en el analizador de expresiones regulares en Mozilla NetWork Security Services (NSS) anteriores a 3.12.3 como las utilizadas en Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, y AOL Instant Messenger (AIM), permite a servidores SSL remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecución de código de su elección a través de un nombre de dominio largo en el campo Common Name (CN) en un certificado X.509, relativo a la función cert_TestHost_Name.\r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.12.3:*:*:*:*:*:*:*","matchCriteriaId":"000A1698-C9DE-49A1-9F5D-FDED34A134E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*","matchCriteriaId":"E8DF7CEB-81F5-46FC-9588-AF5326957C89"},{"vulnerable":false,"criteria":"cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*","matchCriteriaId":"6606C39B-8137-44B6-A96E-E0B8F67FAFFB"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"},{"vulnerable":false,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","matchCriteriaId":"87A0BF9F-F7E9-4196-BEF7-800B4C850990"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2009-1185.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36088","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36102","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37098","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39428","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1","source":"secalert@redhat.com"},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-43.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35891","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103B.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512912","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/810-2/","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1185.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021030.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2009/mfsa2009-43.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2009_48_firefox.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/810-2/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3478","sourceIdentifier":"cve@mitre.org","published":"2009-09-29T23:30:00.313","lastModified":"2026-06-16T23:11:41.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing \" (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe."},{"lang":"es","value":"Vulnerabilidad de inyección de argumento en (1) src/content/js/connection/sftp.js y (2) src/content/js/connection/controlSocket.js.in en extensión FireFTP v1.0.5 para Firefox permite a usuarios SFTP autenticados remotamente provocar alteraciones de permisos de usuarios, eliminar, descargar, o mover  el fichero erróneo a través de un nombre de fichero que contenga \" (doble comilla), lo que no es filtrado o codificado adecuadamente cuando FireFTP crea el comando de envío a psftp.exe."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nightlight:fireftp:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9727600C-CCB5-4D51-B788-D341259E659C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/36860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp105-en.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36536","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/36860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vuln.sg/fireftp105-en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2009-4100","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.390","lastModified":"2026-06-16T23:13:02.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload."},{"lang":"es","value":"La extensión Yoono anterior a versión 6.1.1 para Firefox, realiza ciertas operaciones con privilegios de Chrome, que permite a los atacantes remotos asistidos por el usuario para ejecutar comandos arbitrarios y realizar ataques de tipo cross-domain scripting por medio de manejadores de eventos DOM tal y como onload."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.0","matchCriteriaId":"8672C9E4-520C-40F2-9BA1-17292AA2D2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.0.2.474:*:*:*:*:*:*:*","matchCriteriaId":"13A7E116-AF8A-44FE-BB59-D7F5C960D380"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.0.3.564:*:*:*:*:*:*:*","matchCriteriaId":"E291D7B2-78FE-4AC4-AEB3-25D6DF64FD57"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.0.4.641:*:*:*:*:*:*:*","matchCriteriaId":"8E52E7CE-17E6-4236-BF11-71DDE7929DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.1.0.743:*:*:*:*:*:*:*","matchCriteriaId":"02D5A3E7-56BE-4E73-8C52-43337C0D935D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:2.2.1.1038:*:*:*:*:*:*:*","matchCriteriaId":"9194EA29-A019-448F-BFD7-4D15861CFF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.0.1268:*:*:*:*:*:*:*","matchCriteriaId":"93998252-0AA7-47B7-B72C-6962FD7E7168"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.0.1270:*:*:*:*:*:*:*","matchCriteriaId":"EB5BDDF4-F63B-4F4D-9655-66362520F2E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.1.1388:*:*:*:*:*:*:*","matchCriteriaId":"102261B7-7AC2-497D-A393-4A029C972213"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.2.1976:*:*:*:*:*:*:*","matchCriteriaId":"2BFB3765-38C6-4474-924E-613324530C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.3.2369:*:*:*:*:*:*:*","matchCriteriaId":"DBB9BCAE-02DA-4E2C-930F-270F3F48E792"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.4.2469:*:*:*:*:*:*:*","matchCriteriaId":"E6028C4A-C0AF-4497-8C96-C7EE975C9D8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.5.2626:*:*:*:*:*:*:*","matchCriteriaId":"5FCEE47D-CD03-4E80-9C81-8C28062B4787"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.0.6.2723:*:*:*:*:*:*:*","matchCriteriaId":"273F0B0E-D171-405B-B421-B185A97C6A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.1.0.2898:*:*:*:*:*:*:*","matchCriteriaId":"D557BFE2-BFDE-479B-89AB-21EE49DD8EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:3.1.1.2999:*:*:*:*:*:*:*","matchCriteriaId":"155BC363-9577-424E-BDA5-A8F0A267A1E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.0.4529:*:*:*:*:*:*:*","matchCriteriaId":"92AFCCC9-A7F2-4E45-975B-A253B4C78413"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.1.4774:*:*:*:*:*:*:*","matchCriteriaId":"6EE75F46-55B5-4DCC-98B1-B3BFC2F7B462"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.2.5149:*:*:*:*:*:*:*","matchCriteriaId":"F3276A3D-C603-4187-9981-68AF84836DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:4.0.3.5488:*:*:*:*:*:*:*","matchCriteriaId":"152D0A1C-CCF0-4238-B505-57CD8C0E2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.1.11511_11520:*:*:*:*:*:*:*","matchCriteriaId":"9225E5EA-B2D5-4E9B-BA5E-36419D43ACC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AC0F04B1-CEAD-4C86-AFAE-366379AB72BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"823A7319-A550-476B-9E52-6D27C3162953"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC77C93B-F28E-49C5-A4B5-46D4C98C57BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"59BE93A6-E997-4304-9BB2-1B41E1C52875"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CAD2A4DA-D209-4F64-A233-9C49433235C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"505F95F9-B873-4218-BEBB-394351EE4ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A0736D-283C-4ECB-9A8E-82CEC7A008CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B652DE4B-4A39-487C-B7C9-3EFAE812C462"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D6EF27FB-4DD9-4CDD-9CF9-A075C9B3D856"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"CBBAC4E7-7349-4AE6-9142-02C91A62E4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"790D2BD3-8360-4B79-A4A0-2830B979BA68"},{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7037DC76-925C-43EF-9F88-3E2A6349C3EC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37468","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37123","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/1833#version-6.1.1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/1833#version-6.1.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54417","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorSolution":"NVD received information from Yoono development team on December 4, 2009 that the fixed version is in fact 6.1.1.  A patch can be found at the following URL:\r\n\r\nhttps://addons.mozilla.org/en-US/firefox/addons/versions/1833\r\n\r\n\r\n","evaluatorImpact":"Per info from the following advisory: \r\n\r\nhttp://www.net-security.org/secworld.php?id=8527\r\n\r\nRaised the score to CIA:complete\r\n\r\n\r\nNVD received information from Yoono development team on December 4, 2009 that the affected versions are in fact 6.1.0 and previous.  NVD adjusted affected versions accordingly because of this new information."}},{"cve":{"id":"CVE-2009-4101","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.420","lastModified":"2026-06-16T23:13:02.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed."},{"lang":"es","value":"infoRSS v1.1.4.2 y versiones anteriores de la extensión para Firefox, realiza ciertas operaciones con privilegios chrome, lo que permite a atacantes remotos ejecutar comandos de su elección y realizar ataques de ejecución de secuencias de comandos en dominios cruzados a través de la etiqueta \"description\" en un feed RSS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4.2","matchCriteriaId":"CF0D6D5B-8C06-4E8C-B850-2CD507E3EA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1243299A-75A7-4345-876D-E10A86428455"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"E8444F89-182C-4BA4-8B7A-5FE32AF8ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"ADF9EC81-5CD0-42EC-B871-6D142E35FCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"22D3A39A-0DD5-41A7-8A13-1C99E5F25DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F9D6DC75-ABD9-4944-9CCB-E2263BFC6BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E6227353-6D9E-4E4E-AEB0-26462B0C519E"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"7B10C05E-5434-4757-A79D-9690827567EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"BEE8396E-FAE6-4EBD-BB83-2E18823110CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0F91ABF1-9522-4996-89A0-BD673446FEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.4:*:*:*:*:*:*:*","matchCriteriaId":"36CEB12E-3C96-413A-8EA0-06F80E0F37F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DED26B7E-1468-4563-9C45-576A615C1B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1B1C2B71-37A6-4BC0-8F5F-1704C4B7A630"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"ECAF9854-713E-43E3-AEB8-A3E8CCED8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"008E5B31-01C9-4876-BF6D-0FC89E3CDD25"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA94DE2-0CE4-4A64-870D-56D37880E6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"724B305E-344F-4731-A71B-78BE5C9D1FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"386FE397-0E4A-43F8-9466-DBD4065EAADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0719B4AF-B6E5-4D0F-9066-5F05F72061B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F58F40A6-7F53-4E08-BAD5-35118E94860E"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5FC66A0C-D197-493A-983D-101B4E9A2F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"867E4DBF-DB72-41F0-9290-D5D35D9168AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54370","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Per information from the following advisory:\r\nhttp://www.net-security.org/secworld.php?id=8527\r\nraised the score to CIA:complete since this vulnerability gives attacker the full access to the computer.\r\n"}},{"cve":{"id":"CVE-2009-4102","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.437","lastModified":"2026-06-16T23:13:02.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed."},{"lang":"es","value":"Sage v1.4.3 y anteriores extensiones para Firefox realiza ciertas operaciones con privilegios del chrome, lo que permite a atacantes remotos ejecutar comandos de su elección y realizar ataques ataques de secuencias de comandos a través de la etiqueta descripción de un feed RSS.\r\n\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sage.mozdev:sage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"A10F3C51-FECD-4010-B354-6311E981C8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sage.mozdev:sage:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"4FB1A380-665E-4766-9BA2-730C3BDF4BD9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://forums.mozillazine.org/viewtopic.php?f=48&t=1603515&start=0","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN99203127/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000070","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37466","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1951","source":"cve@mitre.org"},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37120","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54396","source":"cve@mitre.org"},{"url":"http://forums.mozillazine.org/viewtopic.php?f=48&t=1603515&start=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN99203127/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.net-security.org/secworld.php?id=8527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54396","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Per info from the following advisory: \r\n\r\nhttp://www.net-security.org/secworld.php?id=8527\r\n\r\nScored this CVE CIA:complete"}},{"cve":{"id":"CVE-2009-4127","sourceIdentifier":"cve@mitre.org","published":"2009-12-02T19:30:00.203","lastModified":"2026-06-16T23:13:05.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving unspecified Toolbar buttons and the eval function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad inespecífica en la extensión de Firefox Wikipedia Toolbar anteriores a v0.5.9.2 permite a atacantes remotos con ayuda del usuario ejecutar JavaScript arbitrario con privilegios Chrome a través de vectores que incluyen botones inespecíficos de la barra de herramientas y la función eval. NOTA: LA procedencia de la información es desconocida; los detalles fueron obtenidos de terceras partes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.9.1","matchCriteriaId":"EAFDA9BA-88F5-4EE1-8CD9-44E6577D3C47"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E58547CA-DF08-4F4A-97E5-DEE7F44A3856"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4CE6EE2B-013D-4DA3-B9DC-7DCF9A9D194C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2433D72E-C5D1-4D7F-8202-ACF83B707E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B395FDE2-5998-4D0B-90F9-A558AA2556DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"9464376B-6AD4-43D2-B2CD-716F645FDAA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"06676111-C161-4A43-8F18-444C550AFD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"79FECBBF-44B0-459E-B1A8-1A0E742C299B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B0231836-F6A0-49F9-AE0C-5F4036B2DF94"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5:*:*:*:*:*:*:*","matchCriteriaId":"4A2959D5-9182-48DE-83E7-120DAC388382"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B763E13D-FD92-4025-921C-63047F76CADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF2CCC8A-2DCE-4707-84CD-302963015D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCCBD3F7-379E-4EBF-A838-219DD28EFE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"114E5DEB-1978-46E8-9932-E9CFF0E18AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"53614EEA-4C06-47E0-97A7-BA371381D1AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2030838A-6F2F-4998-ADD6-0983896DCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"75F48B37-48F6-4275-BE7D-B32D51583229"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E81B091F-00B9-4385-8986-3A06E3135410"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B60954CB-FEA1-4219-B9DE-4E5259E96F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8BEE9642-B660-4B29-8089-B7419A38A645"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7DE1D65F-B8F6-42BF-8C76-BCC790FFD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A345BC5E-45E0-42BC-9B73-2988B6F990C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CAC78EAF-CBA9-432B-9863-019231E32532"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"D541F9B2-EB09-43D6-BF66-FF77D1F617CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.8:*:*:*:*:*:*:*","matchCriteriaId":"5909B350-4A02-4747-9D6A-621201852283"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikipedia:wikipedia_toolbar:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"DB1CB769-650E-42B2-9FF9-84FB32C1A87F"}]}]}],"references":[{"url":"http://secunia.com/advisories/37377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37038","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/37038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4129","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T17:30:00.343","lastModified":"2026-06-16T23:13:05.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Mozilla Firefox allows remote attackers to produce a JavaScript message with a spoofed domain association by writing the message in between the document request and document load for a web page in a different domain."},{"lang":"es","value":"Condiciones de carrera en Mozilla Firefox permite a atacantes remotos producir un mensaje JavaScript con una asociación de dominio manipulada mediante la escritura del mensaje entre la petición del documento y la carga de la pagina web en diferente dominio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54611","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4130","sourceIdentifier":"cve@mitre.org","published":"2009-12-14T17:30:00.420","lastModified":"2026-06-16T23:13:05.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Visual truncation vulnerability in the MakeScriptDialogTitle function in nsGlobalWindow.cpp in Mozilla Firefox allows remote attackers to spoof the origin domain name of a script via a long name."},{"lang":"es","value":"Vulnerabilidad de truncado visual en la funcion MakeScriptDialogTitle en nsGlobalWindow.cpp en Mozilla Firefox permite a atacantes remotos falsificar el dominio de orgien de una secuencia de comando a través del nombre largo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37232","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54612","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2009-12/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1023287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4630","sourceIdentifier":"cve@mitre.org","published":"2010-01-29T18:30:00.887","lastModified":"2026-06-16T23:14:03.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, performs DNS prefetching of domain names contained in links within local HTML documents, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests.  NOTE: the vendor disputes the significance of this issue, stating \"I don't think we necessarily need to worry about that case.\""},{"lang":"es","value":"Mozilla Necko usado en Firefox, SeaMonkey y otras aplicaciones, realiza una pre-consulta sobre los nombres de dominio en enlaces dentro de los documentos HTML locales, lo que facilita a atacantes remotos el determinar la localización de red de las aplicaciones de usuario mediante peticiones de loggin DNS. NOTA: el fabricante cuestiona la importancia de esta cuestión, diciendo que \"No cree necesario preocuparse por ese tema\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","matchCriteriaId":"138701FB-929A-4683-B41F-CB014ACFE44A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"D5C8E657-3049-4462-98F6-296C60BC8C5C"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453403","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=492196","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=453403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=492196","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Firefox, Thunderbird, or Seamonkey as shipped with Red Hat Enterprise Linux 3, 4,\nor 5.","lastModified":"2010-02-01T00:00:00"}]}},{"cve":{"id":"CVE-2010-2792","sourceIdentifier":"secalert@redhat.com","published":"2010-08-30T20:00:02.157","lastModified":"2026-06-16T23:21:30.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-the-middle attacks, by providing a UNIX socket for communication between this plug-in and the client (aka qspice-client) in qspice 0.3.0, and then accessing this socket."},{"lang":"es","value":"Condición de carrera en el complemento SPICE (o spice-xpi) v2.2 de Firefox. Permite a usuarios locales obtener información confidencial, y realizar ataques man-in-the-middle, proporcionando un socket UNIX para una comunicación entre este complemento y el cliente (qspice-client) en qspice 0.3.0, y a continuación accediendo a este socket."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:N","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BB0C3886-62F2-49AF-B8BA-B4F3F72A1C3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://osvdb.org/67619","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/41120","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0632.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0651.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/42711","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/2181","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=620350","source":"secalert@redhat.com"},{"url":"http://osvdb.org/67619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0632.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0651.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/42711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=620350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-2794","sourceIdentifier":"secalert@redhat.com","published":"2010-08-30T20:00:02.203","lastModified":"2026-06-16T23:21:31.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file."},{"lang":"es","value":"El complemento SPICE (o spice-xpi) v2.2 de Firefox permite a usuarios locales sobreescribir ficheros de su elección a través de un ataque de enlace simbólico a un fichero de log sin especificar."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BB0C3886-62F2-49AF-B8BA-B4F3F72A1C3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://osvdb.org/67620","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/41120","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0651.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/2181","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=620356","source":"secalert@redhat.com"},{"url":"http://osvdb.org/67620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0651.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=620356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-0064","sourceIdentifier":"cve@mitre.org","published":"2011-03-07T21:00:01.330","lastModified":"2026-06-16T23:26:43.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index."},{"lang":"es","value":"La función hb_buffer_ensure en hb-buffer.c de HarfBuzz, como el usuado en Pango v1.28.3,Firefox  otros productos, no verifica que las reasignaciones de memoria sean exitosas, lo que permite a atacantes remotos provocar una denegación de servicio (desreferenciar el puntero a NULL y bloqueo de la aplicación) o posiblemente ejecutar código arbitrario a través de datos manipulados con fuente OpenType que provoca el uso de un índice incorrecto."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:pango:1.28.3:*:*:*:*:*:*:*","matchCriteriaId":"956EB013-290A-446A-9A88-FE3F73EBD0CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/43559","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43572","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43800","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1025145","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2011/dsa-2178","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:040","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0309.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/46632","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1082-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0555","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0584","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0683","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=606997","source":"cve@mitre.org"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=672502","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678563","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://build.opensuse.org/request/show/63070","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65770","source":"cve@mitre.org"},{"url":"http://cgit.freedesktop.org/harfbuzz/commit/?id=a6a79df5fe2ed2cd307e7a991346faee164e70d9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1025145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/46632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1082-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=606997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=672502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://build.opensuse.org/request/show/63070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65770","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/476.html \r\n'CWE-476: NULL Pointer Dereference'"}},{"cve":{"id":"CVE-2011-0012","sourceIdentifier":"secalert@redhat.com","published":"2011-04-18T17:55:00.937","lastModified":"2026-06-16T23:26:37.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name."},{"lang":"es","value":"Vulnerabilidad de redirección abierta en SPICE Firefox plug-in (spice-xpi) v2.4, v2.3, v2.2 , permite a atacantes remotos redireccionar a usuarios a sitios web de su elección y llevar a cabo ataques de phishing a través de un ataque de enlace simbólico en el fichero de log usbrdrctl, por su nombre predecible.\r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BB0C3886-62F2-49AF-B8BA-B4F3F72A1C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1084209-69C4-49F6-8356-740BC61519D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.4:*:*:*:*:*:*:*","matchCriteriaId":"9243551E-92DB-4E10-8318-EB57240DD986"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2011-0426.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/47269","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1025304","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2011/0899","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=639869","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/47269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1025304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=639869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-1179","sourceIdentifier":"secalert@redhat.com","published":"2011-04-18T17:55:01.063","lastModified":"2026-06-16T23:28:52.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) plugin/nsScriptablePeer.cpp and (2) plugin/plugin.cpp, which trigger multiple uses of an uninitialized pointer."},{"lang":"es","value":"Desbordamiento de búfer en SPICE Firefox plug-in (spice-xpi) v2.4,v2.3,v2.2,permite a atacantes remotos provocar una denegación de servicio (caída) o ejecutar código de su elección en (1)plugin/nsScriptablePeer.cpp y (2)plugin/plugin.cpp que desencadena múltiples usos de un puntero sin inicializar"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BB0C3886-62F2-49AF-B8BA-B4F3F72A1C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1084209-69C4-49F6-8356-740BC61519D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:spice-xpi:2.4:*:*:*:*:*:*:*","matchCriteriaId":"9243551E-92DB-4E10-8318-EB57240DD986"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/44060","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0426.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0427.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/47269","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1025304","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2011/0899","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=487006&action=diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689931","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66777","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/44060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0427.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/47269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1025304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=487006&action=diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/66777","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-0341","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2011-05-13T17:05:41.673","lastModified":"2026-06-16T23:27:12.247","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remote attackers to execute arbitrary code via a crafted web site."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función pdfmoz_onmouse function en apps/mozilla/moz_main.c en el plugin MuPDF v2008.09.02 para Firefox permite a atacantes remotos ejecutar código de su elección a través de un sitio web manipulado."}],"affected":[{"source":"PSIRT-CNA@flexerasoftware.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artifex:mupdf:2008.09.02:*:*:*:*:*:*:*","matchCriteriaId":"713CB0E7-529E-4753-9F56-00BEAA5E8D9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/43739","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2011-38/","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/72177","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.securityfocus.com/bid/47739","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://www.vupen.com/english/advisories/2011/1191","source":"PSIRT-CNA@flexerasoftware.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67298","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"http://secunia.com/advisories/43739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2011-38/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/72177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/47739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/1191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=708029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=d2de9cee6036b997e536a0c0384b88b38e523e56","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/67298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-3384","sourceIdentifier":"vultures@jpcert.or.jp","published":"2011-09-08T18:55:01.770","lastModified":"2026-06-16T23:33:11.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Sage add-on v1.3.10 y anterior para Firefox, permite a atacantes remotos inyectar código de su elección a través de secuencias de comandos web o HTML a través de un feed modificado. Una vulnerabilidad diferente de CVE-2009-4102."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sage-mozdev:sage:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.10","matchCriteriaId":"3F23C367-CCEF-42CB-B9F7-629065929C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sage-mozdev:sage:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"97EFBC19-1079-480F-864E-CEDD8D0EC9BC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN30221194/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000069","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN30221194/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2011-000069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-4929","sourceIdentifier":"cve@mitre.org","published":"2012-09-15T18:55:03.187","lastModified":"2026-06-16T23:45:55.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack."},{"lang":"es","value":"El protocolo TLS 1.2 y versiones anteriores, como el usado en Mozilla Firefox, Google Chrome, y otros productos, puede hacer cifrados TLS de datos comprimidos sin ofuscar de forma adecuada la longitud de los datos no cifrado, lo que permte a atacantes man-in-the-middle obtener cabeceras HTTP en texto plano observando las diferencias de longitud durante una serie de previsiones en la cual una cadena en una petición HTTP potencialmente coincide con una cadena desconocida en una cabecera HTPP, también conocido como ataque \"CRIME\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","matchCriteriaId":"07E9B637-69D8-4E4F-8896-F8F14CC55E03"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/","source":"cve@mitre.org"},{"url":"http://code.google.com/p/chromium/issues/detail?id=139744","source":"cve@mitre.org"},{"url":"http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html","source":"cve@mitre.org"},{"url":"http://jvn.jp/en/jp/JVN65273415/index.html","source":"cve@mitre.org"},{"url":"http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000129.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00096.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00034.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00048.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=136612293908376&w=2","source":"cve@mitre.org"},{"url":"http://news.ycombinator.com/item?id=4510829","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","source":"cve@mitre.org"},{"url":"http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT5784","source":"cve@mitre.org"},{"url":"http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312","source":"cve@mitre.org"},{"url":"http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2012/dsa-2579","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2013/dsa-2627","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"cve@mitre.org"},{"url":"http://www.ekoparty.org/2012/thai-duong.php","source":"cve@mitre.org"},{"url":"http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/55704","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2012/09/14/crime_tls_attack/","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1627-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1628-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1898-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857051","source":"cve@mitre.org"},{"url":"https://chromiumcodereview.appspot.com/10825183","source":"cve@mitre.org"},{"url":"https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls","source":"cve@mitre.org"},{"url":"https://gist.github.com/3696912","source":"cve@mitre.org"},{"url":"https://github.com/mpgn/CRIME-poc","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18920","source":"cve@mitre.org"},{"url":"https://threatpost.com/en_us/blogs/demo-crime-tls-attack-091212","source":"cve@mitre.org"},{"url":"http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/chromium/issues/detail?id=139744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN65273415/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2012-10/msg00096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136612293908376&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.ycombinator.com/item?id=4510829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ekoparty.org/2012/thai-duong.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/55704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2012/09/14/crime_tls_attack/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1627-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1898-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://chromiumcodereview.appspot.com/10825183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gist.github.com/3696912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/mpgn/CRIME-poc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://threatpost.com/en_us/blogs/demo-crime-tls-attack-091212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-4930","sourceIdentifier":"cve@mitre.org","published":"2012-09-15T18:55:03.250","lastModified":"2026-06-16T23:45:55.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack."},{"lang":"es","value":"El protocolo SPDY 3 y anteriores, como el usado en Mozilla Firefox, Google Chrome, y otros productos, puede hacer cifrados TLS de datos comprimidos sin ofuscar de forma adecuada la longitud de los datos no cifrado, lo que permte a atacantes man-in-the-middle obtener cabeceras HTTP en texto plano observando las diferencias de longitud durante una serie de previsiones en la cual una cadena en una petición HTTP potencialmente coincide con una cadena desconocida en una cabecera HTPP, también conocido como ataque \"CRIME\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","matchCriteriaId":"07E9B637-69D8-4E4F-8896-F8F14CC55E03"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/","source":"cve@mitre.org"},{"url":"http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html","source":"cve@mitre.org"},{"url":"http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312","source":"cve@mitre.org"},{"url":"http://www.ekoparty.org/2012/thai-duong.php","source":"cve@mitre.org"},{"url":"http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2012/09/14/crime_tls_attack/","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857737","source":"cve@mitre.org"},{"url":"https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls","source":"cve@mitre.org"},{"url":"http://arstechnica.com/security/2012/09/crime-hijacks-https-sessions/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isecpartners.com/blog/2012/9/14/details-on-the-crime-attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://threatpost.com/en_us/blogs/crime-attack-uses-compression-ratio-tls-requests-side-channel-hijack-secure-sessions-091312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ekoparty.org/2012/thai-duong.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2012/09/14/crime_tls_attack/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-1489","sourceIdentifier":"secalert_us@oracle.com","published":"2013-01-31T14:55:01.903","lastModified":"2026-06-16T23:51:31.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the \"Very High\" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka \"Issue 53\" and the \"Java Security Slider\" vulnerability."},{"lang":"es","value":"Una Vulnerabilidad no especificada en el componente Java Runtime Environment (JRE) en Java SE versión 7 Update 10 y Update 11 de Oracle, cuando se ejecuta en Windows con Internet Explorer, Firefox, Opera y Google Chrome, permite a los atacantes remotos omitir el nivel de seguridad \"Very High\" del Panel de Control de Java y ejecutar código Java no firmado sin consultar al usuario por medio de vectores desconocidos, también se conoce como \"Issue 53\" y la vulnerabilidad \"Java Security Slider\"."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:windows:*:*","matchCriteriaId":"1C74FCFD-B3D1-48D5-9CD0-99DE675B8643"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:windows:*:*","matchCriteriaId":"88BF7EF1-A70B-4BA3-A564-9E14ECFD098A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:windows:*:*","matchCriteriaId":"70E771E8-F2A9-4A8D-BD7A-B2D69828675B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:windows:*:*","matchCriteriaId":"9752AB75-1457-4A6A-A310-29410A0905C2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"C37BA825-679F-4257-9F2B-CE2318B75396"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*","matchCriteriaId":"4545786D-3129-4D92-B218-F4A92428ED48"}]}]}],"references":[{"url":"http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=136733161405818&w=2","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0237.html","source":"secalert_us@oracle.com"},{"url":"http://seclists.org/fulldisclosure/2013/Jan/241","source":"secalert_us@oracle.com"},{"url":"http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/","source":"secalert_us@oracle.com"},{"url":"http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150","source":"secalert_us@oracle.com"},{"url":"http://www.kb.cert.org/vuls/id/858729","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx","source":"secalert_us@oracle.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA13-032A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]},{"url":"http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/","source":"secalert_us@oracle.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15906","source":"secalert_us@oracle.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19171","source":"secalert_us@oracle.com"},{"url":"http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136733161405818&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2013/Jan/241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://thenextweb.com/insider/2013/01/28/new-vulnerability-bypasses-oracles-attempt-to-stop-malware-drive-by-downloads-via-java-applets/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.informationweek.com/security/application-security/java-security-work-remains-bug-hunter-sa/240147150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/858729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.scmagazine.com.au/News/330453%2Cjava-still-unsafe-new-flaws-discovered.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA13-032A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.zdnet.com/java-update-doesnt-prevent-silent-exploits-at-all-7000010422/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19171","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"This issue (CVE-2013-1489) has been discussed publicly and is sometimes known as the \"Java Security Slider vulnerability\". It has a CVSS of 0 because it does not directly result in an exploitation, but may be combined with other vulnerabilities to allow blind exploitation. When the Security Slider is set to the default (high) all unsigned applets must be authorized via a dialog box by a browser user in order to execute. This provides the browser operator the opportunity to prevent execution of suspicious applets that may result in successful exploits. However, when CVE-2013-1489 is combined with vulnerabilities that can be used to cause direct impacts, the effect can be that the impact can be caused \"silently\" without the authorization dialog box.\""}},{"cve":{"id":"CVE-2013-6901","sourceIdentifier":"vultures@jpcert.or.jp","published":"2013-12-05T12:55:30.400","lastModified":"2026-06-17T00:01:05.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de cross-site scripting (XSS) en la función Space en Cybozu Garoon anteriores a 3.7.0, cuando se utiliza Firefox, permite a atacantes rmotos inyectar scripts web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"vultures@jpcert.or.jp"},{"url":"http://osvdb.org/100555","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/6193","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/100555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/6193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6903","sourceIdentifier":"vultures@jpcert.or.jp","published":"2013-12-05T12:55:36.747","lastModified":"2026-06-17T00:01:06.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de cross-site scripting (XSS) en un componente de planificación en Cybozu Garoon anteriores a 3.7.0, cuando Internet Explorer o Firefox son utilizados, permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"vultures@jpcert.or.jp"},{"url":"http://osvdb.org/100571","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/6165","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/100571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/6165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6904","sourceIdentifier":"vultures@jpcert.or.jp","published":"2013-12-05T12:55:36.853","lastModified":"2026-06-17T00:01:06.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de cross-site scripting (XSS) en un componente de notas en Cybozu Garoon anteriores a 3.7.0, cuando Internet Explorer o Firefox son utilizados, permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"vultures@jpcert.or.jp"},{"url":"http://osvdb.org/100572","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/6395","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/100572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/6395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6905","sourceIdentifier":"vultures@jpcert.or.jp","published":"2013-12-05T12:55:36.933","lastModified":"2026-06-17T00:01:06.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de cross-site scripting (XSS) en un componente de teléfono en Cybozu Garoon anteriores a 3.7.0, cuando Internet Explorer o Firefox son utilizados, permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp5:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"286C00A1-DEA3-4C4D-8236-CFFA73C92372"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"vultures@jpcert.or.jp"},{"url":"http://osvdb.org/100573","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/6195","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/100573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/6195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-6911","sourceIdentifier":"vultures@jpcert.or.jp","published":"2013-12-05T12:55:37.417","lastModified":"2026-06-17T00:01:07.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de cross-site scripting (XSS) en el componente de tablón de anuncios de Cybozu Garoon anteriores a 3.7.2, cuando Internet Explorer o Firefox son utilizados, permite a usuarios autenticados inyectar scripts web o HTML arbitrarios a través de vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp1:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"852EB14A-53AC-4C22-BE6B-8DB95FA7487F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp5:*:*:*:*:*:*","matchCriteriaId":"F47A9F1D-E966-4BEE-AD2D-8DA23B848825"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7:*:*:*:*:*:*:*","matchCriteriaId":"B16589DC-22D2-466A-B2D7-85E20A82B8B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:*:sp1:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"852EB14A-53AC-4C22-BE6B-8DB95FA7487F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"07FC26E9-FA80-4BB8-B239-BE37CA0E5BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:*","matchCriteriaId":"CF71E37E-908E-438A-9743-BB5D25ED5F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:*","matchCriteriaId":"18567DE5-3254-468E-9584-32C9418DAA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:*","matchCriteriaId":"84148B9D-CFA3-4F53-A11E-AE7CEA6BB8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:*","matchCriteriaId":"5251D9B4-DEDB-4D99-97D3-3900E8F5EE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:*","matchCriteriaId":"F2084B74-113F-4B42-85F7-602592BBBFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E7189699-5D46-483A-BF12-092BD32C74E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"96F3B195-B10D-4ABA-A5F3-E242C7C0BA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:*","matchCriteriaId":"33042DF3-CA82-4474-946F-EEF080C14D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.1:sp3:*:*:*:*:*:*","matchCriteriaId":"360867B7-354F-4253-8A97-571121BF43D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27E24A5C-C425-493F-B557-07265251EFD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"EC455565-5C7F-47A6-9664-4FD82F8EADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"3C29786F-C1CE-4716-BD3B-71BFD5D53311"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp3:*:*:*:*:*:*","matchCriteriaId":"F28FB567-BAB5-49DD-9A88-60A242BDD81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:2.5:sp4:*:*:*:*:*:*","matchCriteriaId":"91374D4F-F981-4FE5-8B83-DE4E5DDD29D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"299E9A6F-1DF1-406E-B3EB-BAD21392E569"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57BBC64D-CC0A-4989-916B-8F96AE194283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp2:*:*:*:*:*:*","matchCriteriaId":"ACACBF0A-0108-4B38-84C6-71505A3777AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.0:sp3:*:*:*:*:*:*","matchCriteriaId":"A9204845-9463-420E-AF52-92BC557C288F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:*:*:*:*:*:*:*","matchCriteriaId":"091F5390-9ADF-49D9-83E1-BFD523CD03FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp1:*:*:*:*:*:*","matchCriteriaId":"A3462F9A-A4CA-4622-9614-D1D94797EA32"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp2:*:*:*:*:*:*","matchCriteriaId":"64C1B9B8-14DF-4195-A130-BE4103292125"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.1:sp3:*:*:*:*:*:*","matchCriteriaId":"3A63ACA4-BF92-4CB3-B078-5BA85478593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:*:*:*:*:*:*:*","matchCriteriaId":"71CECA0B-D131-45A7-8D6C-E45EF0F09CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp1:*:*:*:*:*:*","matchCriteriaId":"76EB8EC8-D968-408D-A0F2-14164F515C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp2:*:*:*:*:*:*","matchCriteriaId":"A0166440-4223-4ED5-9C55-0B2CBAEFF196"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp3:*:*:*:*:*:*","matchCriteriaId":"BFCFB357-293D-49CD-8090-FBD687F97D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp4:*:*:*:*:*:*","matchCriteriaId":"63FA07F5-2085-4EE1-9BCB-2F9D0713014F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.5:sp5:*:*:*:*:*:*","matchCriteriaId":"F47A9F1D-E966-4BEE-AD2D-8DA23B848825"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:garoon:3.7:*:*:*:*:*:*:*","matchCriteriaId":"B16589DC-22D2-466A-B2D7-85E20A82B8B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"vultures@jpcert.or.jp"},{"url":"http://osvdb.org/100561","source":"vultures@jpcert.or.jp"},{"url":"https://support.cybozu.com/ja-jp/article/7158","source":"vultures@jpcert.or.jp","tags":["Patch"]},{"url":"http://cs.cybozu.co.jp/information/20131202up01.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN23981867/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/100561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.cybozu.com/ja-jp/article/7158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2014-0387","sourceIdentifier":"secalert_us@oracle.com","published":"2014-01-15T16:08:07.330","lastModified":"2026-06-17T00:02:55.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment."},{"lang":"es","value":"Vulnerabilidad no especificada en Oracle Java SE 6u65 y Java SE 7u45, cuando corre sobre Firefox, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Deployment."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jdk:1.6.0:update65:*:*:*:*:*:*","matchCriteriaId":"105B15BC-6764-41C3-847D-BA1396CC034F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.6.0:update65:*:*:*:*:*:*","matchCriteriaId":"BBCFEADF-7282-4C56-813B-A5DEAD9BF17B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jre:1.7.0:update45:*:*:*:*:*:*","matchCriteriaId":"A5226952-1972-4572-9F8C-C90D89040FD3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=139402697611681&w=2","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=139402749111889&w=2","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/102002","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0030.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0134.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0135.html","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56485","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56535","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/64758","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/64882","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1029608","source":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2014:0414","source":"secalert_us@oracle.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139402697611681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=139402749111889&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/102002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0134.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/64758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2014:0414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Per: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html\n\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.\""}},{"cve":{"id":"CVE-2013-6853","sourceIdentifier":"cve@mitre.org","published":"2014-01-26T01:55:09.267","lastModified":"2026-06-17T00:01:01.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim."},{"lang":"es","value":"Vulnerabilidad cross-site scripting (XSS) en clickstream.js de Y! Toolbar plugin para FireFox 3.1.0.20130813024103 para Mac, y 2.5.9.2013418100420 para Windows, permite a atacantes remotos inyectar script web o HTML de forma arbirtaria a través de una URL manipulada que es guardada por la victima."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:toolbar:3.1.0.20130813024103:*:*:*:*:*:*:*","matchCriteriaId":"60640F32-1D15-4C81-BC10-BDFBD12BCD77"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4C56F007-5F8E-4BDD-A803-C907BCC0AF55"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:toolbar:2.5.9.2013418100420:*:*:*:*:*:*:*","matchCriteriaId":"A4EF0CDE-577C-494F-A2F8-D86FCB748A7F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4C56F007-5F8E-4BDD-A803-C907BCC0AF55"}]}]}],"references":[{"url":"http://osvdb.org/102175","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/124800/Y-Toolbar-Cross-Site-Scripting.html","source":"cve@mitre.org"},{"url":"http://www.cloudscan.me/2014/01/cve-2013-6853-stored-xss-in-y-toolbar.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/64971","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90529","source":"cve@mitre.org"},{"url":"http://osvdb.org/102175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/124800/Y-Toolbar-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cloudscan.me/2014/01/cve-2013-6853-stored-xss-in-y-toolbar.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7152","sourceIdentifier":"cve@mitre.org","published":"2016-09-06T10:59:00.133","lastModified":"2026-06-17T00:52:41.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a \"HEIST\" attack."},{"lang":"es","value":"El protocolo HTTPS no considera el rol de la ventana de congestión TCP cuando da información sobre longitud del contenido, lo que facilita a atacantes remotos obtener datos en texto plano aprovechando una configuración de navegador web donde son enviadas cookies de terceros, también conocido como ataque \"HEIST\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera:-:*:*:*:*:*:*:*","matchCriteriaId":"9E2045F5-B973-49F1-8FFD-778BADCEC00F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"C37BA825-679F-4257-9F2B-CE2318B75396"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"}]}]}],"references":[{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92769","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036741","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036742","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036743","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036744","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036745","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036746","source":"cve@mitre.org"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]}]}},{"cve":{"id":"CVE-2016-7153","sourceIdentifier":"cve@mitre.org","published":"2016-09-06T10:59:01.493","lastModified":"2026-06-17T00:52:41.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a \"HEIST\" attack."},{"lang":"es","value":"El protocolo HTTP/2 no considera el rol de la ventana de congestión TCP cuando da información sobre longitud del contenido, lo que facilita a atacantes remotos obtener datos en texto plano aprovechando una configuración de navegador web donde son enviadas las cookies de terceros, también conocido como ataque \"HEIST\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*","matchCriteriaId":"77D197D7-57FB-4898-8C70-B19D5F0D5BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"C37BA825-679F-4257-9F2B-CE2318B75396"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*","matchCriteriaId":"39B565E1-C2F1-44FC-A517-E3130332B17C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"AE370CAA-04B3-434E-BD5B-1D87DE596C10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*","matchCriteriaId":"4545786D-3129-4D92-B218-F4A92428ED48"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92773","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036741","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036742","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036743","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036744","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036745","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1036746","source":"cve@mitre.org"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"cve@mitre.org","tags":["Technical Description"]},{"url":"http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]},{"url":"http://www.securityfocus.com/bid/92773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tom.vg/papers/heist_blackhat2016.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description"]}]}}]}