CVE-2009-0355

Published: Feb 4, 2009Modified: Apr 23, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.

Affected (92)

Products: Mozilla: Firefox

Mozilla

1 product

Firefox

Configuration A

92 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 3.0.5
Mozilla Firefox	Version 0.10.1
Mozilla Firefox	Version 0.10
Mozilla Firefox	Version 0.1
Mozilla Firefox	Version 0.2
Mozilla Firefox	Version 0.3
Mozilla Firefox	Version 0.4
Mozilla Firefox	Version 0.5
Mozilla Firefox	Version 0.6.1
Mozilla Firefox	Version 0.6
Mozilla Firefox	Version 0.7.1
Mozilla Firefox	Version 0.7
Mozilla Firefox	Version 0.8
Mozilla Firefox	Version 0.9.1
Mozilla Firefox	Version 0.9.2
Mozilla Firefox	Version 0.9.3
Mozilla Firefox	Version 0.9
Mozilla Firefox	Version 0.9 rc
Mozilla Firefox	Version 0.9_rc
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.0 preview_release
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 1.8
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.15
Mozilla Firefox	Version 2.0.0.16
Mozilla Firefox	Version 2.0.0.17
Mozilla Firefox	Version 2.0.0.18
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 2.0 beta1
Mozilla Firefox	Version 2.0 beta_1
Mozilla Firefox	Version 2.0 rc2
Mozilla Firefox	Version 2.0 rc3
Mozilla Firefox	Version 2.0_.10
Mozilla Firefox	Version 2.0_.1
Mozilla Firefox	Version 2.0_.4
Mozilla Firefox	Version 2.0_.5
Mozilla Firefox	Version 2.0_.6
Mozilla Firefox	Version 2.0_.7
Mozilla Firefox	Version 2.0_.9
Mozilla Firefox	Version 2.0_8
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0.2
Mozilla Firefox	Version 3.0.3
Mozilla Firefox	Version 3.0.4
Mozilla Firefox	Version 3.0
Mozilla Firefox	Version 3.0 alpha
Mozilla Firefox	Version 3.0 beta2
Mozilla Firefox	Version 3.0 beta5

Related CWEs

CWE-264

References (54)

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2009-0256.html

Source: secalert@redhat.com

http://secunia.com/advisories/33799

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33808

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33809

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33816

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33831

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33841

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33846

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33869

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/34324

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/34417

Source: secalert@redhat.com

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-040.htm

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:044

Source: secalert@redhat.com

http://www.mozilla.org/security/announce/2009/mfsa2009-03.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-0257.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0258.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/33598

Source: secalert@redhat.com

Patch

http://www.securitytracker.com/id?1021665

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-717-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-717-2

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0313

Source: secalert@redhat.com

https://bugzilla.mozilla.org/show_bug.cgi?id=466937

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9161

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html