PT-2008-6579 · Mozilla+1 · Firefox+1

Moz_Bug_R_A4 · CVE-2008-5513 · Publicado 2008-12-17 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 2.x through 2.0.0.18 Mozilla Firefox versions 3.x through 3.0.4

Description The issue allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.

Recommendations For Mozilla Firefox versions 2.x through 2.0.0.18, update to version 2.0.0.19 or later. For Mozilla Firefox versions 3.x through 3.0.4, update to version 3.0.5 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5513

DSA-1707-1

RHSA-2008:1036

RHSA-2008:1037

RHSA-2008_1036

RHSA-2008_1037

RHSA-2009:0002

RHSA-2009_0002

Produtos afetados

Firefox

Red Hat

Referências · 41

• http://secunia.com/advisories/33188 · Nota
• http://redhat.com/support/errata/RHSA-2008-1036.html · Aviso do Fabricante
• http://secunia.com/advisories/33421 · Nota
• http://securitytracker.com/id?1021421 · Nota
• http://redhat.com/support/errata/RHSA-2009-0002.html · Aviso do Fabricante
• https://usn.ubuntu.com/690-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-5512 · Nota
• http://secunia.com/advisories/33184 · Nota
• http://redhat.com/support/errata/RHSA-2008-1037.html · Aviso do Fabricante
• http://secunia.com/advisories/33523 · Nota
• https://access.redhat.com/security/cve/CVE-2008-5504 · Nota
• http://ubuntu.com/usn/usn-690-2 · Aviso do Fabricante
• http://secunia.com/advisories/34501 · Nota
• https://access.redhat.com/security/cve/CVE-2008-5508 · Nota
• http://vupen.com/english/advisories/2009/0977 · Nota