PT-2008-6180 · Mozilla+1 · Firefox+1

Luke Bryan

·

Publicado

2008-11-13

·

Atualizado

2017-09-29

·

CVE-2008-5015

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 3.x before 3.0.4
Description The issue allows user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system. This occurs when a file: URI is accessed in the same tab from a chrome or privileged about: page, assigning chrome privileges to the file.
Recommendations For Mozilla Firefox versions 3.x before 3.0.4, update to version 3.0.4 or later to resolve the issue.

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-5015
RHSA-2008:0978
RHSA-2008_0978

Produtos afetados

Firefox
Red Hat