CWE Code: 94
Vulnerability Type: privilege_escalation
CVSS Score: 7.6
CWE Name:  Improper Control of Generation of Code ('Code Injection')
Summary: mozilla firefox before 3.0.16 and 3.5.x before 3.5.6, and seamonkey before 2.0.1, allows remote attackers to execute arbitrary javascript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-12-17
Last Modified Date: 2017-09-19