CVE-2009-2472: XSS
Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2472?
CVE-2009-2472 is considered to be of medium severity due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2009-2472?
To fix CVE-2009-2472, upgrade Mozilla Firefox to version 3.0.12 or later.
Which versions of Firefox are affected by CVE-2009-2472?
CVE-2009-2472 affects all versions of Mozilla Firefox prior to 3.0.12.
Can CVE-2009-2472 lead to data theft?
Yes, CVE-2009-2472 can lead to data theft through cross-site scripting exploits.
What impact does CVE-2009-2472 have on user safety?
CVE-2009-2472 can compromise user safety by allowing attackers to execute malicious scripts under the context of a trusted website.