CVE:CVE-2009-4102
CNNVD:CNNVD-200911-302
Firefox Sage 1.4.3版本及其早期版本具有chrome特权来执行特定操作,远程攻击者可以借助RSS feed描述标签，执行任意指令并执行跨域脚本攻击。
solution:Upgrade sage.mozdev sage to a higher version than 1.4.3,1.3.8,and avoid the version (,1.4.3],1.3.8; Upgrade mozilla firefox to a higher version than *