PT-2008-6918 · Mozilla+1 · Firefox+2
Paul Nickerson
·
Publicado
1970-01-01
·
Atualizado
2018-11-01
·
CVE-2008-3837
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 2.0.0.17
Mozilla Firefox 3.x versions prior to 3.0.2
SeaMonkey versions prior to 1.1.12
Description
The issue allows user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls
window.moveBy. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.Recommendations
For Mozilla Firefox versions prior to 2.0.0.17, update to version 2.0.0.17 or later.
For Mozilla Firefox 3.x versions prior to 3.0.2, update to version 3.0.2 or later.
For SeaMonkey versions prior to 1.1.12, update to version 1.1.12 or later.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey