Fluid Attacks Database

Description

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	firefox	<0:3.0.15-3.el5_4	0:3.0.15-3.el5_4
rpm rhel5	nspr	<0:4.7.6-1.el5_4	0:4.7.6-1.el5_4
rpm rhel5	xulrunner	<0:1.9.0.15-3.el5_4	0:1.9.0.15-3.el5_4

Aliases

1. CVE-2009-33702. NVD-2009-33703. OSV-2009-3370

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.