← Back

CVE-2009-4100

nvd nist
Published: Nov 29, 2009Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload.

Affected (33)

Products: Yoono: Yoono
1 product
Yoono
Configuration A
33 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Yoono
Up to 6.1.0
Version 2.0.2.474
Version 2.0.3.564
Version 2.0.4.641
Version 2.1.0.743
Version 2.2.1.1038
Version 3.0.0.1268
Version 3.0.0.1270
Version 3.0.1.1388
Version 3.0.2.1976
Version 3.0.3.2369
Version 3.0.4.2469
Version 3.0.5.2626
Version 3.0.6.2723
Version 3.1.0.2898
Version 3.1.1.2999
Version 4.0.0.4529
Version 4.0.1.4774
Version 4.0.2.5149
Version 4.0.3.5488
Version 5.0.1.11511_11520
Version 5.0.3
Version 5.0.4
Version 5.0.5
Version 5.0.6
Version 5.0.7.2
Version 5.0.7
Version 5.1.0
Version 5.2.0
Version 5.3.0
Version 5.4.0
Version 6.0.0
Version 6.0.1
Running on/withPlatform Versions
Mozilla
Firefox
All versions

References (12)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.