PT-2008-6182 · Mozilla+1 · Firefox+1

Mrbkap · Published 2008-11-13 · Updated 2023-02-13 · CVE-2008-5019

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 2.x through 2.0.0.17 Mozilla Firefox versions 3.x through 3.0.3

Description The issue allows remote attackers to violate the same origin policy, enabling cross-site scripting (XSS) attacks and the execution of arbitrary JavaScript with chrome privileges.

Recommendations For Mozilla Firefox versions 2.x through 2.0.0.17, update to version 2.0.0.18 or later. For Mozilla Firefox versions 3.x through 3.0.3, update to version 3.0.4 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-5019

DSA-1671-1

RHSA-2008:0977

RHSA-2008:0978

RHSA-2008_0977

RHSA-2008_0978

Affected Products

Firefox

Red Hat

References · 53

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02793 · Security Note
• https://bdu.fstec.ru/vul/2015-02792 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0977.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02795 · Security Note
• https://bdu.fstec.ru/vul/2015-02788 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5019 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:230 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0978.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-November/msg00385.html · Vendor Advisory
• http://mozilla.org/security/announce/2008/mfsa2008-53.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-November/msg00366.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02790 · Security Note
• http://ubuntu.com/usn/usn-667-1 · Vendor Advisory