CVE-2008-5511

Опубликовано: 17 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."

Ссылки

http://secunia.com/advisories/33184
Third Party Advisory
http://secunia.com/advisories/33188
Third Party Advisory
http://secunia.com/advisories/33189
Third Party Advisory
http://secunia.com/advisories/33203
Third Party Advisory
http://secunia.com/advisories/33204
Third Party Advisory
http://secunia.com/advisories/33205
Third Party Advisory
http://secunia.com/advisories/33216
Third Party Advisory
http://secunia.com/advisories/33231
Third Party Advisory
http://secunia.com/advisories/33232
Third Party Advisory
http://secunia.com/advisories/33408
Third Party Advisory
http://secunia.com/advisories/33415
Third Party Advisory
http://secunia.com/advisories/33421
Third Party Advisory
http://secunia.com/advisories/33433
Third Party Advisory
http://secunia.com/advisories/33434
Third Party Advisory
http://secunia.com/advisories/33523
Third Party Advisory
http://secunia.com/advisories/33547
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://secunia.com/advisories/35080
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.0.5 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.1.14 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01798

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-5511

ubuntu

больше 16 лет назад

CVE-2008-5511

redhat

больше 16 лет назад

CVE-2008-5511

debian

больше 16 лет назад

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...

GHSA-wfgh-c975-36mr

github

около 3 лет назад

ELSA-2008-1036

oracle-oval

больше 16 лет назад

ELSA-2008-1036: firefox security update (CRITICAL)

EPSS

Процентиль: 82%

0.01798

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79