Skip to content

CVE-2009-4100 Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scriptin...

HighCVSS 9.3 EPSS 3.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload.

Affected products

ProductAffected versionsFixed in
yoono <= 6.1.0 No fix listed
yoono = 2.0.2.474 No fix listed
yoono = 2.0.3.564 No fix listed
yoono = 2.0.4.641 No fix listed
yoono = 2.1.0.743 No fix listed
yoono = 2.2.1.1038 No fix listed
yoono = 3.0.0.1268 No fix listed
yoono = 3.0.0.1270 No fix listed
yoono = 3.0.1.1388 No fix listed
yoono = 3.0.2.1976 No fix listed
yoono = 3.0.3.2369 No fix listed
yoono = 3.0.4.2469 No fix listed
yoono = 3.0.5.2626 No fix listed
yoono = 3.0.6.2723 No fix listed
yoono = 3.1.0.2898 No fix listed
yoono = 3.1.1.2999 No fix listed
yoono = 4.0.0.4529 No fix listed
yoono = 4.0.1.4774 No fix listed
yoono = 4.0.2.5149 No fix listed
yoono = 4.0.3.5488 No fix listed
yoono = 5.0.1.11511_11520 No fix listed
yoono = 5.0.3 No fix listed
yoono = 5.0.4 No fix listed
yoono = 5.0.5 No fix listed
yoono = 5.0.6 No fix listed
Show 8 more
ProductAffected versionsFixed in
yoono = 5.0.7 No fix listed
yoono = 5.0.7.2 No fix listed
yoono = 5.1.0 No fix listed
yoono = 5.2.0 No fix listed
yoono = 5.3.0 No fix listed
yoono = 5.4.0 No fix listed
yoono = 6.0.0 No fix listed
yoono = 6.0.1 No fix listed

References