CVE-2009-4101

CRITICAL 9.3CVE-2009-4101 · Published 29/11/2009 · updated 16/06/2026

In short

CVE-2009-4101 is a CRITICAL (CVSS 9.3) vulnerability affecting inforss (didier ernotte).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
inforss didier_ernotte	`= 0.10.0= 0.10.1= 0.5= 0.7.7= 0.8.4= 0.8.7= 0.8.8.1= 0.8.8.2= 0.8.9= 0.8.9.1= 0.8.9.3= 0.8.9.4= 0.8.9.5= 0.9.0= 1.0.0= 1.1.0.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.4.1≤ 1.1.4.2`	No fix yet

Description

infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed.

References

secunia.com/advisories/37467 · Vendor Advisory
vupen.com/english/advisories/2009/3323 · Vendor Advisory
addons.mozilla.org/en-US/firefox/addons/versions/361
exchange.xforce.ibmcloud.com/vulnerabilities/54370

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free