{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-09T17:06:39.028","vulnerabilities":[{"cve":{"id":"CVE-2009-4101","sourceIdentifier":"cve@mitre.org","published":"2009-11-29T13:08:29.420","lastModified":"2026-06-16T23:13:02.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed."},{"lang":"es","value":"infoRSS v1.1.4.2 y versiones anteriores de la extensión para Firefox, realiza ciertas operaciones con privilegios chrome, lo que permite a atacantes remotos ejecutar comandos de su elección y realizar ataques de ejecución de secuencias de comandos en dominios cruzados a través de la etiqueta \"description\" en un feed RSS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4.2","matchCriteriaId":"CF0D6D5B-8C06-4E8C-B850-2CD507E3EA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1243299A-75A7-4345-876D-E10A86428455"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"E8444F89-182C-4BA4-8B7A-5FE32AF8ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"ADF9EC81-5CD0-42EC-B871-6D142E35FCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"22D3A39A-0DD5-41A7-8A13-1C99E5F25DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F9D6DC75-ABD9-4944-9CCB-E2263BFC6BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"E6227353-6D9E-4E4E-AEB0-26462B0C519E"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"7B10C05E-5434-4757-A79D-9690827567EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"BEE8396E-FAE6-4EBD-BB83-2E18823110CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0F91ABF1-9522-4996-89A0-BD673446FEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.4:*:*:*:*:*:*:*","matchCriteriaId":"36CEB12E-3C96-413A-8EA0-06F80E0F37F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.8.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DED26B7E-1468-4563-9C45-576A615C1B3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1B1C2B71-37A6-4BC0-8F5F-1704C4B7A630"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"ECAF9854-713E-43E3-AEB8-A3E8CCED8940"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"008E5B31-01C9-4876-BF6D-0FC89E3CDD25"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA94DE2-0CE4-4A64-870D-56D37880E6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"724B305E-344F-4731-A71B-78BE5C9D1FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"386FE397-0E4A-43F8-9466-DBD4065EAADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0719B4AF-B6E5-4D0F-9066-5F05F72061B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F58F40A6-7F53-4E08-BAD5-35118E94860E"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5FC66A0C-D197-493A-983D-101B4E9A2F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:didier_ernotte:inforss:1.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"867E4DBF-DB72-41F0-9290-D5D35D9168AE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"14E6A30E-7577-4569-9309-53A0AF7FE3AC"}]}]}],"references":[{"url":"http://secunia.com/advisories/37467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54370","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Per information from the following advisory:\r\nhttp://www.net-security.org/secworld.php?id=8527\r\nraised the score to CIA:complete since this vulnerability gives attacker the full access to the computer.\r\n"}}]}