CVE-2009-2472

Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the…

published July 22, 2009

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02243 · 82.7th percentile
Published
2009-07-22T18:00Z
EPSS history
Timeline
  • 22 JUL 18:00Z
    Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the…
    cvelistv5