Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3198

Опубликовано: 17 июл. 2008
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 80%
0.01485
Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

ubuntu
около 17 лет назад

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

redhat
около 17 лет назад

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

debian
около 17 лет назад

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arb ...

github
больше 3 лет назад

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.

oracle-oval
около 17 лет назад

ELSA-2008-0597: firefox security update (CRITICAL)

EPSS

Процентиль: 80%
0.01485
Низкий

7.5 High

CVSS2

Дефекты

CWE-94