Candidate: CVE-2009-2065
PublicDate: 2009-06-15 19:30:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2065
Description:
 Mozilla Firefox 3.0.10, and possibly other versions, detects http content
 in https web pages only when the top-level frame uses https, which allows
 man-in-the-middle attackers to execute arbitrary web script, in an https
 site's context, by modifying an http page to include an https iframe that
 references a script file on an http site, related to
 "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
Ubuntu-Description:
Notes:
  jdstrand> CVEs in Firefox are tracked in the xulrunner source packages. The
  mapping of xulrunner sources to firefox is:
   xulrunner (1.8.0): firefox (1.5) - Ubuntu 6.06 LTS
   xulrunner (1.8.1): firefox (2.0) - Ubuntu 6.10 - 8.04 LTS
   xulrunner-1.9: firefox-3.0
   xulrunner-1.9.1: firefox-3.5
 jdstrand> Ubuntu 6.06 LTS and 10.04 LTS uses the embedded xulrunner and not
  the system xulrunner-1.9.2, so it is tracked in the firefox source package.
 mdeslaur> as of 2011-04-11, no details. Marking as ignored.
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_firefox:
upstream_firefox: needs-triage
dapper_firefox: ignored (reached end-of-life)
hardy_firefox: ignored (uses system xulrunner)
intrepid_firefox: DNE
jaunty_firefox: DNE
karmic_firefox: DNE
lucid_firefox: ignored
maverick_firefox: ignored
devel_firefox: ignored


Patches_xulrunner:
upstream_xulrunner: needs-triage
dapper_xulrunner: DNE
hardy_xulrunner: ignored
intrepid_xulrunner: needed (reached end-of-life)
jaunty_xulrunner: ignored (reached end-of-life)
karmic_xulrunner: ignored
lucid_xulrunner: DNE
maverick_xulrunner: DNE
devel_xulrunner: DNE

Patches_xulrunner-1.9:
upstream_xulrunner-1.9: needed
dapper_xulrunner-1.9: DNE
hardy_xulrunner-1.9: ignored (reverse dependencies no longer process web content)
intrepid_xulrunner-1.9: needed (reached end-of-life)
jaunty_xulrunner-1.9: ignored (reverse dependencies no longer process web content)
karmic_xulrunner-1.9: DNE
lucid_xulrunner-1.9: DNE
maverick_xulrunner-1.9: DNE
devel_xulrunner-1.9: DNE

Patches_xulrunner-1.9.1:
upstream_xulrunner-1.9.1: needed
dapper_xulrunner-1.9.1: DNE
hardy_xulrunner-1.9.1: DNE
intrepid_xulrunner-1.9.1: DNE
jaunty_xulrunner-1.9.1: ignored (use firefox-3.0 instead)
karmic_xulrunner-1.9.1: ignored (reverse dependencies no longer process web content)
lucid_xulrunner-1.9.1: DNE
maverick_xulrunner-1.9.1: DNE
devel_xulrunner-1.9.1: DNE


Patches_seamonkey:
upstream_seamonkey: needed
dapper_seamonkey: DNE
hardy_seamonkey: ignored
intrepid_seamonkey: needed (reached end-of-life)
jaunty_seamonkey: ignored (reached end-of-life)
karmic_seamonkey: ignored
lucid_seamonkey: ignored
maverick_seamonkey: ignored
devel_seamonkey: ignored