Test ID:	1.3.6.1.4.1.25623.1.0.900350
Category:	Web application abuses
Title:	Mozilla Firefox PDF JavaScript Restriction Bypass Vulnerability - Windows
Summary:	Mozilla Firefox browser is prone to PDF Javascript Restriction Bypass Vulnerability.
Description:	Summary: Mozilla Firefox browser is prone to PDF Javascript Restriction Bypass Vulnerability. Vulnerability Insight: Error while executing DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file which causes bypassing restricted Adobe's JavaScript restrictions. Vulnerability Impact: Successful exploitation will let attacker execute arbitrary codes in the context of the malicious PDF file and execute arbitrary codes into the context of the remote system. Affected Software/OS: Firefox version 3.0.10 and prior on Windows. Solution: Upgrade to Mozilla Firefox version 3.6.3 or later CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1597 Bugtraq: 20090503 [SecNiche WhitePaper ] - PDF Silent HTTP Form Repurposing Attacks (Google Search) http://www.securityfocus.com/archive/1/503183/100/0/threaded http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.