← Back

CVE-2009-3370

nvd nist
Published: Oct 29, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.

Affected (21)

Products: Mozilla: Firefox
1 product
Firefox
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Version 3.0.10
Version 3.0.11
Version 3.0.12
Version 3.0.13
Version 3.0.14
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.0.4
Version 3.0.5
Version 3.0.6
Version 3.0.7
Version 3.0.8
Version 3.0.9
Version 3.0
Version 3.0 alpha
Version 3.0 beta2
Version 3.0 beta5
Version 3.5.1
Version 3.5.2
Version 3.5.3

Timeline

No history available yet.