Vulnerability Description
Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving unspecified Toolbar buttons and the eval function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | All versions |
| Wikipedia | Wikipedia Toolbar | <= 0.5.9.1 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/37377Vendor Advisory
- http://www.securityfocus.com/bid/37038
- http://www.vupen.com/english/advisories/2009/3268Vendor Advisory
- https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2
- http://secunia.com/advisories/37377Vendor Advisory
- http://www.securityfocus.com/bid/37038
- http://www.vupen.com/english/advisories/2009/3268Vendor Advisory
- https://addons.mozilla.org/en-US/firefox/addons/versions/6401#version-0.5.9.2
FAQ
What is CVE-2009-4127?
CVE-2009-4127 is a vulnerability with a CVSS score of 9.3 (HIGH). Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving u...
How severe is CVE-2009-4127?
CVE-2009-4127 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4127?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Wikipedia Wikipedia Toolbar.