CVE-2009-4100

Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload.

• yoono yoono (<= 6.1.0) • yoono yoono 2.0.2.474 • yoono yoono 2.0.3.564 • yoono yoono 2.0.4.641 • yoono yoono 2.1.0.743 • yoono yoono 2.2.1.1038 • yoono yoono 3.0.0.1268 • yoono yoono 3.0.0.1270 • yoono yoono 3.0.1.1388 • yoono yoono 3.0.2.1976 • yoono yoono 3.0.3.2369 • yoono yoono 3.0.4.2469 • yoono yoono 3.0.5.2626 • yoono yoono 3.0.6.2723 • yoono yoono 3.1.0.2898 • yoono yoono 3.1.1.2999 • yoono yoono 4.0.0.4529 • yoono yoono 4.0.1.4774 • yoono yoono 4.0.2.5149 • yoono yoono 4.0.3.5488 • yoono yoono 5.0.1.11511 11520 • yoono yoono 5.0.3 • yoono yoono 5.0.4 • yoono yoono 5.0.5 • yoono yoono 5.0.6 • yoono yoono 5.0.7 • yoono yoono 5.0.7.2 • yoono yoono 5.1.0 • yoono yoono 5.2.0 • yoono yoono 5.3.0 • yoono yoono 5.4.0 • yoono yoono 6.0.0 • yoono yoono 6.0.1