CVE ID:	CVE-2009-1307
Description:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Test IDs:	1.3.6.1.4.1.25623.1.0.63962   1.3.6.1.4.1.25623.1.0.64417
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1307 1022093 http://www.securitytracker.com/id?1022093 264308 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 34656 http://www.securityfocus.com/bid/34656 34758 http://secunia.com/advisories/34758 34780 http://secunia.com/advisories/34780 34843 http://secunia.com/advisories/34843 34844 http://secunia.com/advisories/34844 34894 http://secunia.com/advisories/34894 35042 http://secunia.com/advisories/35042 35065 http://secunia.com/advisories/35065 35536 http://secunia.com/advisories/35536 35561 http://secunia.com/advisories/35561 35602 http://secunia.com/advisories/35602 35882 http://secunia.com/advisories/35882 ADV-2009-1125 http://www.vupen.com/english/advisories/2009/1125 DSA-1797 http://www.debian.org/security/2009/dsa-1797 DSA-1830 http://www.debian.org/security/2009/dsa-1830 FEDORA-2009-3875 https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html FEDORA-2009-7567 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html FEDORA-2009-7614 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html MDVSA-2009:111 http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 MDVSA-2009:141 http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 RHSA-2009:0436 http://www.redhat.com/support/errata/RHSA-2009-0436.html RHSA-2009:0437 http://rhn.redhat.com/errata/RHSA-2009-0437.html RHSA-2009:1125 http://www.redhat.com/support/errata/RHSA-2009-1125.html RHSA-2009:1126 http://www.redhat.com/support/errata/RHSA-2009-1126.html SSA:2009-176-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 SSA:2009-178-01 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 SUSE-SR:2009:010 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html USN-764-1 https://usn.ubuntu.com/764-1/ USN-782-1 http://www.ubuntu.com/usn/usn-782-1 http://www.mozilla.org/security/announce/2009/mfsa2009-17.html http://www.mozilla.org/security/announce/2009/mfsa2009-17.html https://bugzilla.mozilla.org/show_bug.cgi?id=481342 https://bugzilla.mozilla.org/show_bug.cgi?id=481342 oval:org.mitre.oval:def:10972 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10972 oval:org.mitre.oval:def:5933 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5933 oval:org.mitre.oval:def:6154 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6154 oval:org.mitre.oval:def:6266 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6266 oval:org.mitre.oval:def:7008 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7008