PT-2008-4240 · Mozilla+1 · Firefox+2
Publicado
2008-07-02
·
Atualizado
2018-10-11
·
CVE-2008-2800
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 2.0.0.15
SeaMonkey versions prior to 1.1.10
Description
The issue allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks. This can be achieved through various vectors, including an event handler attached to an outer window, a SCRIPT element in an unloaded document, or the onreadystatechange handler in conjunction with an XMLHttpRequest.
Recommendations
For Mozilla Firefox versions prior to 2.0.0.15, update to version 2.0.0.15 or later to resolve the issue.
For SeaMonkey versions prior to 1.1.10, update to version 1.1.10 or later to resolve the issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey