CVE-2009-3986: Code Injection
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.
Other sources
Security researcher David James reported that a content window which is opened by a chrome window retains a reference to the chrome window via the window.opener property. Via this reference, the newly opened content window can access functions inside the chrome window, such as eval, and use these functions to perform a privilege escalation and run arbitrary JavaScript code with chrome privileges. Because an attacker would need to find a browser dialog which opens a chrome privileged window then navigate the new window to an attacker-controlled page in order to leverage this vulnerability, the severity of this issue was determined to be moderate.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3986?
CVE-2009-3986 has a severity rating of moderate, as it allows remote attackers to execute arbitrary JavaScript with chrome privileges.
How do I fix CVE-2009-3986?
To fix CVE-2009-3986, upgrade to Mozilla Firefox version 3.0.16 or 3.5.6 and above, or SeaMonkey version 2.0.1 and above.
What software is affected by CVE-2009-3986?
CVE-2009-3986 affects Mozilla Firefox versions before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey versions before 2.0.1.
What exploit does CVE-2009-3986 leverage?
CVE-2009-3986 leverages a reference to a chrome window from a content window through the window.opener property.
What are the implications of CVE-2009-3986?
The implications of CVE-2009-3986 include potential theft of sensitive information or unwanted actions performed in the context of the user.