VULNERABILITY INTELLIGENCE

CVE-2009-1839

CVSS score5.4 MEDIUM
EPSS probability7.12%
CISA KEVNot currently listed
Published2009-06-12
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:N/A:N

Description

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.

Primary references