CVE:CVE-2009-2472
CNNVD:CNNVD-200907-327
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 存在跨站脚本漏洞。处理对象wrapper时的多个错误可能导致访问其他站点对对象所设置的属性。
solution:Upgrade mozilla firefox to a higher version than 3.0.12,and avoid the version (,3.0.12); Upgrade fedoraproject fedora to a higher version than 10,and avoid the version 10; Upgrade suse linux_enterprise_debuginfo to a higher version than 10:sp2,11,and avoid the version 10:sp2,11; Upgrade opensuse opensuse to a higher version than 11.0,11.1,and avoid the version 11.0,11.1; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp2,11,and avoid the version 10:sp2,11; Upgrade suse linux_enterprise_server to a higher version than 10:sp2,11,and avoid the version 10:sp2,11