{"api_version":"1","generated_at":"2026-07-23T09:39:56+00:00","cve":"CVE-2009-3385","urls":{"html":"https://cve.report/CVE-2009-3385","api":"https://cve.report/api/cve/CVE-2009-3385.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-3385","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3385"},"summary":{"title":"CVE-2009-3385","description":"The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-03-23 00:53:22","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.1","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","name":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2010:013","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/38830","name":"http://www.securityfocus.com/bid/38830","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mozilla SeaMonkey Scriptable Plugin Content Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=371976","name":"https://bugzilla.mozilla.org/show_bug.cgi?id=371976","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"371976 – (CVE-2009-3385) execution of flash in seamonkey mail","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/0648","name":"http://www.vupen.com/english/advisories/2010/0648","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/39001","name":"http://secunia.com/advisories/39001","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Mozilla SeaMonkey Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-06.html","name":"http://www.mozilla.org/security/announce/2010/mfsa2010-06.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"MFSA 2010-06: Scriptable plugin execution in SeaMonkey mail","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10271","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10271","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3385","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3385","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"alpha","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1","cpe7":"alpha","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"1.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"3385","vulnerable":"1","versionEndIncluding":"1.1.18","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mozilla","cpe5":"seamonkey","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:22:24.822Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"38830","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/38830"},{"name":"39001","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/39001"},{"name":"oval:org.mitre.oval:def:10271","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10271"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=371976"},{"name":"ADV-2010-0648","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/0648"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-06.html"},{"name":"SUSE-SR:2010:013","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-03-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"38830","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/38830"},{"name":"39001","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/39001"},{"name":"oval:org.mitre.oval:def:10271","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10271"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=371976"},{"name":"ADV-2010-0648","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/0648"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-06.html"},{"name":"SUSE-SR:2010:013","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-3385","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"38830","refsource":"BID","url":"http://www.securityfocus.com/bid/38830"},{"name":"39001","refsource":"SECUNIA","url":"http://secunia.com/advisories/39001"},{"name":"oval:org.mitre.oval:def:10271","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10271"},{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=371976","refsource":"CONFIRM","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=371976"},{"name":"ADV-2010-0648","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0648"},{"name":"http://www.mozilla.org/security/announce/2010/mfsa2010-06.html","refsource":"CONFIRM","url":"http://www.mozilla.org/security/announce/2010/mfsa2010-06.html"},{"name":"SUSE-SR:2010:013","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-3385","datePublished":"2010-03-22T17:23:00.000Z","dateReserved":"2009-09-24T00:00:00.000Z","dateUpdated":"2024-08-07T06:22:24.822Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-03-23 00:53:22","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.18","matchCriteriaId":"259CE19E-494D-491B-8945-B8770E27F940"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09E18FC0-0C8C-4FA1-85B9-B868D00F002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"4A97B6E1-EABA-4977-A3FC-64DF0392AA95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"CB01A97F-ACE1-4A99-8939-6DF8FE5B5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6521C877-63C9-4B6E-9FC9-1263FFBB7950"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D949DF0A-CBC2-40E1-AE6C-60E6F58D2481"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3C5CDA57-1A50-4EDB-80E2-D3EBB44EA653"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22D33486-4956-4E2C-BA16-FA269A9D02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3104343E-93B6-4D4A-BC95-ED9F7E91FB6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"381313EF-DF84-4F66-9962-DE8F45029D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A0228476-14E4-443C-BBAE-2C9CD8594DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A803A500-DCE2-44FC-ABEB-A90A1D39D85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"022274DE-5251-49C9-B6E5-1D8CEDC34E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B9F84CB7-93F7-4912-BC87-497867B96491"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"8992E9C6-09B3-492E-B7DA-899D5238EC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"D58B704B-F06E-44C1-BBD1-A090D1E6583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"40270FBD-744A-49D9-9FFA-1DCD897210D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"20E01097-F60A-4FB2-BA47-84A267EE87D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F65732F-317B-49A2-B9B0-FA1102B8B45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DB430F19-069A-43FD-9097-586D4449D327"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"76AD0439-3BFB-4AD1-8E2C-99D0B099FA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1E6D7528-E591-48A6-8165-BE42F8EBF6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BA710423-0075-44B8-9DCB-6380FA974486"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C5521DA3-E6AF-4350-B971-10B4A1C9B1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DDD15752-A253-47B1-BCE0-B55B84B47C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"60B39A9D-44A4-4D7F-9004-C44066BBE277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"F203EC52-2126-4227-AF3B-23857E5BB222"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E951567B-8402-42EA-AE33-EBA9235A868F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"82A94198-7EBF-4D8A-A99A-A32A8561FF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"1BFFBC58-ACD2-449D-B010-5026D6022F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*","matchCriteriaId":"83EED5D2-EC40-4253-991B-0C746FBEF6A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*","matchCriteriaId":"0F73092C-1458-4278-A30D-C0F89B1F82F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AAB559BD-4BF7-417F-962F-B8971FF1614B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"3385","Ordinal":"1","Title":"CVE-2009-3385","CVE":"CVE-2009-3385","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"3385","Ordinal":"1","NoteData":"The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.","Type":"Description","Title":"CVE-2009-3385"},{"CveYear":"2009","CveId":"3385","Ordinal":"2","NoteData":"2010-03-22","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"3385","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}