PT-2009-4304
CVE-2009-1839
·
تاريخ النشر
2009-06-11
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
5.4
متوسطةالمقاييسAV:N/AC:H/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Mozilla Firefox versions prior to 3.0.11
Description:
The issue allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document. This is achieved through a "file-URL-to-file-URL scripting" attack, where an incorrect principal is associated with a file: URL loaded through the location bar.
Recommendations:
For versions prior to 3.0.11, update to version 3.0.11 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾