PT-2008-6182 · Mozilla+1 · Firefox+1

Mrbkap · Publicado 2008-11-13 · Atualizado 2023-02-13 · CVE-2008-5019

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 2.x through 2.0.0.17 Mozilla Firefox versions 3.x through 3.0.3

Description The issue allows remote attackers to violate the same origin policy, enabling cross-site scripting (XSS) attacks and the execution of arbitrary JavaScript with chrome privileges.

Recommendations For Mozilla Firefox versions 2.x through 2.0.0.17, update to version 2.0.0.18 or later. For Mozilla Firefox versions 3.x through 3.0.3, update to version 3.0.4 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5019

DSA-1671-1

RHSA-2008:0977

RHSA-2008:0978

RHSA-2008_0977

RHSA-2008_0978

Produtos afetados

Firefox

Red Hat

Referências · 53

• https://access.redhat.com/security/cve/CVE-2008-0017 · Nota
• http://secunia.com/advisories/32694 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/0977 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10943 · Nota
• http://vupen.com/english/advisories/2008/3146 · Nota
• https://access.redhat.com/security/cve/CVE-2008-5024 · Nota
• https://bdu.fstec.ru/vul/2015-02793 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-02792 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2008-5052 · Nota
• http://securityfocus.com/bid/32281 · Nota
• http://redhat.com/support/errata/RHSA-2008-0977.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-5012 · Nota
• https://bdu.fstec.ru/vul/2015-02795 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2008-5018 · Nota