CVE-2009-1311

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.

🔗 References (56)

• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2009-0437.html
• secalert@redhathttp://secunia.com/advisories/34758
• secalert@redhathttp://secunia.com/advisories/34843
• secalert@redhathttp://secunia.com/advisories/34844
• secalert@redhathttp://secunia.com/advisories/34894
• secalert@redhathttp://secunia.com/advisories/35042
• secalert@redhathttp://secunia.com/advisories/35065
• secalert@redhathttp://secunia.com/advisories/35561
• secalert@redhathttp://secunia.com/advisories/35882
• secalert@redhathttp://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408
• secalert@redhathttp://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1
• secalert@redhathttp://www.debian.org/security/2009/dsa-1797
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDVSA-2009:111
• secalert@redhathttp://www.mozilla.org/security/announce/2009/mfsa2009-21.html