PT-2008-2832 · Mozilla+1 · Firefox+2

Gregory Fleischer · Publicado 2008-03-28 · Atualizado 2018-10-11 · CVE-2008-1240

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 2.0.0.13 SeaMonkey versions prior to 1.1.9

Description The issue allows remote attackers to access arbitrary ports on the local machine due to improper parsing of the content origin for jar: URIs by LiveConnect before sending them to the Java plugin.

Recommendations For Mozilla Firefox versions prior to 2.0.0.13, update to version 2.0.0.13 or later. For SeaMonkey versions prior to 1.1.9, update to version 1.1.9 or later.

Correção

Identificadores relacionados

CVE-2008-1240

DSA-1532-1

DSA-1534-1

DSA-1534-2

DSA-1535-1

Produtos afetados

Java Plug-In

Firefox

Seamonkey

Referências · 27

• http://securityfocus.com/bid/28448 · Nota
• http://secunia.com/advisories/29616 · Nota
• http://vupen.com/english/advisories/2008/0998/references · Nota
• http://secunia.com/advisories/30620 · Nota
• http://secunia.com/advisories/29560 · Nota
• http://us-cert.gov/cas/techalerts/TA08-087A.html · Nota
• http://debian.org/security/2008/dsa-1535 · Aviso do Fabricante
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 · Nota
• http://secunia.com/advisories/30327 · Nota
• http://mozilla.org/security/announce/2008/mfsa2008-18.html · Nota
• http://secunia.com/advisories/29558 · Nota
• http://securityfocus.com/archive/1/490196/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41458 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1240 · Nota de Segurança
• http://secunia.com/advisories/29645 · Nota