CVE-2009-3014

Published: Aug 31, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do not properly handle javascript: URIs in HTML links within 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Location HTTP response header or (2) specifying the content of a Location HTTP response header.

Affected (60)

Products: Mozilla: Firefox, Mozilla, Seamonkey

3 products

Configuration A

60 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 3.0.13
Mozilla Firefox	Version 3.0.10
Mozilla Firefox	Version 3.0.11
Mozilla Firefox	Version 3.0.12
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0.2
Mozilla Firefox	Version 3.0.3
Mozilla Firefox	Version 3.0.4
Mozilla Firefox	Version 3.0.5
Mozilla Firefox	Version 3.0.6
Mozilla Firefox	Version 3.0.7
Mozilla Firefox	Version 3.0.8
Mozilla Firefox	Version 3.0.9
Mozilla Firefox	Version 3.5
Mozilla Firefox	Version 3.6 a1_pre
Mozilla Firefox	Version 3.7 a1_pre
Mozilla Mozilla	Up to 1.7
Mozilla Mozilla	Version 0.8
Mozilla Mozilla	Version 0.9.2.1
Mozilla Mozilla	Version 0.9.2
Mozilla Mozilla	Version 0.9.35
Mozilla Mozilla	Version 0.9.3
Mozilla Mozilla	Version 0.9.4.1
Mozilla Mozilla	Version 0.9.48
Mozilla Mozilla	Version 0.9.4
Mozilla Mozilla	Version 0.9.5
Mozilla Mozilla	Version 0.9.6
Mozilla Mozilla	Version 0.9.7
Mozilla Mozilla	Version 0.9.8
Mozilla Mozilla	Version 0.9.9
Mozilla Mozilla	Version 1.0.1
Mozilla Mozilla	Version 1.0.2
Mozilla Mozilla	Version 1.0
Mozilla Mozilla	Version 1.0 rc1
Mozilla Mozilla	Version 1.0 rc2
Mozilla Mozilla	Version 1.0 rc3
Mozilla Mozilla	Version 1.1
Mozilla Mozilla	Version 1.1 alpha
Mozilla Mozilla	Version 1.1 beta
Mozilla Mozilla	Version 1.2.1
Mozilla Mozilla	Version 1.2
Mozilla Mozilla	Version 1.2 alpha
Mozilla Mozilla	Version 1.2 beta
Mozilla Mozilla	Version 1.3.1
Mozilla Mozilla	Version 1.3
Mozilla Mozilla	Version 1.4.1
Mozilla Mozilla	Version 1.4.2
Mozilla Mozilla	Version 1.4.4
Mozilla Mozilla	Version 1.4
Mozilla Mozilla	Version 1.4 alpha
Mozilla Mozilla	Version 1.4 beta
Mozilla Mozilla	Version 1.5.1
Mozilla Mozilla	Version 1.5
Mozilla Mozilla	Version 1.5 alpha
Mozilla Mozilla	Version 1.5 rc1
Mozilla Mozilla	Version 1.5 rc2
Mozilla Mozilla	Version 1.6
Mozilla Mozilla	Version 1.6 alpha
Mozilla Mozilla	Version 1.6 beta
Mozilla Seamonkey	Version 1.1.17