CVE-2008-5024

Опубликовано: 13 нояб. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
Third Party Advisory
http://secunia.com/advisories/32684
Third Party Advisory
http://secunia.com/advisories/32693
Third Party Advisory
http://secunia.com/advisories/32694
Third Party Advisory
http://secunia.com/advisories/32695
Third Party Advisory
http://secunia.com/advisories/32713
Third Party Advisory
http://secunia.com/advisories/32714
Third Party Advisory
http://secunia.com/advisories/32715
Third Party Advisory
http://secunia.com/advisories/32721
Third Party Advisory
http://secunia.com/advisories/32778
Third Party Advisory
http://secunia.com/advisories/32798
Third Party Advisory
http://secunia.com/advisories/32845
Third Party Advisory
http://secunia.com/advisories/32853
Third Party Advisory
http://secunia.com/advisories/33433
Third Party Advisory
http://secunia.com/advisories/33434
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://ubuntu.com/usn/usn-667-1
Third Party Advisory
http://www.debian.org/security/2008/dsa-1669
Third Party Advisory
http://www.debian.org/security/2008/dsa-1671
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.18 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.0.4 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.1.13 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.18 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05502

Низкий

7.5 High

CVSS2

Дефекты

CWE-91

Связанные уязвимости

CVE-2008-5024

ubuntu

больше 16 лет назад

CVE-2008-5024

redhat

больше 16 лет назад

CVE-2008-5024

debian

больше 16 лет назад

Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunder ...

GHSA-r9x5-wf23-5hh7

github

около 3 лет назад

ELSA-2008-0978

oracle-oval

больше 16 лет назад

ELSA-2008-0978: firefox security update (CRITICAL)

EPSS

Процентиль: 90%

0.05502

Низкий

7.5 High

CVSS2

Дефекты

CWE-91