CVE-2009-0776

no score yetEPSS 1.6%

nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2009-03-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
mozilla:seamonkey
mozilla:thunderbird

References

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html
http://secunia.com/advisories/34137
http://secunia.com/advisories/34140
http://secunia.com/advisories/34145

Check your stack JSON