VULNERABILITY INTELLIGENCE
CVE-2009-3079
CVSS score10 HIGH
EPSS probability3.87%
CISA KEVNot currently listed
Published2009-09-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')