CVE-2009-3370

Publication date 29 October 2009

Last updated 24 July 2024

Ubuntu priority

Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox-3.5	9.10 karmic	Fixed 3.5.4+nobinonly-0ubuntu0.9.10.1
	9.04 jaunty	Fixed 3.5.4+nobinonly-0ubuntu0.9.04.1
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release
xulrunner-1.9.1	9.10 karmic	Fixed 1.9.1.4+nobinonly-0ubuntu0.9.10.1
	9.04 jaunty	Fixed 1.9.1.4+nobinonly-0ubuntu0.9.04.3
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-853-1
Firefox and Xulrunner vulnerabilities
31 October 2009

Other references

https://www.cve.org/CVERecord?id=CVE-2009-3370