Vulnetix
Try Vulnetix Request Demo
CVE-2009-3385 PUBLISHED CVSS 7.099999904632568 HIGH

The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.

EPSS 1.39% · 80.2th percentile

Risk Scores

CVSS v2.0
7.099999904632568
EPSS Score
1.39%
80.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
mozillaseamonkey0, 1.0, 1.0

Timeline

References

Open in Interactive Console →