CVE-2009-1840

CVE-2009-1840 describes a critical vulnerability in Mozilla Firefox before version 3.0.11, Thunderbird, and SeaMonkey, where the applications fail to enforce content policy before loading script files into XUL documents. This oversight allows remote attackers to bypass security restrictions, potentially through crafted HTML in emails (web bugs) or malicious web content. With a CVSS score of 9.3 (Critical), this vulnerability has a network attack vector, medium attack complexity, and could lead to complete compromise of confidentiality, integrity, and availability. While no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is available and there's no evidence of active exploitation or significant community discussion, the high FAUCET Risk Score of 75/100 indicates its potential severity.