Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-4100

Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload.

Published

2009-11-29T13:08:29.390

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application yoono yoono ≤ 6.1.0 Yes
Application yoono yoono 2.0.2.474 Yes
Application yoono yoono 2.0.3.564 Yes
Application yoono yoono 2.0.4.641 Yes
Application yoono yoono 2.1.0.743 Yes
Application yoono yoono 2.2.1.1038 Yes
Application yoono yoono 3.0.0.1268 Yes
Application yoono yoono 3.0.0.1270 Yes
Application yoono yoono 3.0.1.1388 Yes
Application yoono yoono 3.0.2.1976 Yes
Application yoono yoono 3.0.3.2369 Yes
Application yoono yoono 3.0.4.2469 Yes
Application yoono yoono 3.0.5.2626 Yes
Application yoono yoono 3.0.6.2723 Yes
Application yoono yoono 3.1.0.2898 Yes
Application yoono yoono 3.1.1.2999 Yes
Application yoono yoono 4.0.0.4529 Yes
Application yoono yoono 4.0.1.4774 Yes
Application yoono yoono 4.0.2.5149 Yes
Application yoono yoono 4.0.3.5488 Yes
Application yoono yoono 5.0.1.11511_11520 Yes
Application yoono yoono 5.0.3 Yes
Application yoono yoono 5.0.4 Yes
Application yoono yoono 5.0.5 Yes
Application yoono yoono 5.0.6 Yes
Application yoono yoono 5.0.7 Yes
Application yoono yoono 5.0.7.2 Yes
Application yoono yoono 5.1.0 Yes
Application yoono yoono 5.2.0 Yes
Application yoono yoono 5.3.0 Yes
Application yoono yoono 5.4.0 Yes
Application yoono yoono 6.0.0 Yes
Application yoono yoono 6.0.1 Yes
Application mozilla firefox * No
References