Vulnerability Name:

CVE-2009-1597 (CCN-50536)

Assigned:2009-05-03
Published:2009-05-03
Updated:2018-10-30
Summary:Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI.
Note: the researcher reports that Adobe's position is "a PDF file is active content."
CVSS v3 Severity:3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.5 High (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
2.1 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N/E:U/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-264
Vulnerability Consequences:Bypass Security
References:Source: CCN
Type: BugTraq Mailing List, Sun May 03 2009 - 13:15:37 CDT
[SecNiche WhitePaper ] - PDF Silent HTTP Form Repurposing Attacks

Source: MITRE
Type: CNA
CVE-2009-1597

Source: CCN
Type: SecNiche Whitepaper, May 2, 2009
PDF Silent HTTP Form Repurposing Attacks

Source: MISC
Type: Exploit
http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf

Source: CCN
Type: Mozilla Web site
Firefox

Source: CCN
Type: OSVDB ID: 54529
Mozilla Firefox Form Inline PDF Submit Element Target Attribute Javascript URI DOM Call Handling Weakness

Source: BUGTRAQ
Type: UNKNOWN
20090503 [SecNiche WhitePaper ] - PDF Silent HTTP Form Repurposing Attacks

Source: XF
Type: UNKNOWN
firefox-dom-security-bypass(50536)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:*
  • AND
  • cpe:/a:adobe:acrobat_reader:7.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    mozilla firefox *
    adobe acrobat reader 7.0
    mozilla firefox *