RCE in Mozilla Firefox

CVE-2009-3079

Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.039 (89.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References