CVE-2008-5512

Опубликовано: 17 дек. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page content can pollute XPCNativeWrappers."

Ссылки

http://secunia.com/advisories/33184
Third Party Advisory
http://secunia.com/advisories/33188
Third Party Advisory
http://secunia.com/advisories/33189
Third Party Advisory
http://secunia.com/advisories/33203
Third Party Advisory
http://secunia.com/advisories/33204
Third Party Advisory
http://secunia.com/advisories/33205
Third Party Advisory
http://secunia.com/advisories/33216
Third Party Advisory
http://secunia.com/advisories/33231
Third Party Advisory
http://secunia.com/advisories/33232
Third Party Advisory
http://secunia.com/advisories/33408
Third Party Advisory
http://secunia.com/advisories/33415
Third Party Advisory
http://secunia.com/advisories/33421
Third Party Advisory
http://secunia.com/advisories/33433
Third Party Advisory
http://secunia.com/advisories/33434
Third Party Advisory
http://secunia.com/advisories/33523
Third Party Advisory
http://secunia.com/advisories/33547
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://secunia.com/advisories/35080
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.0.5 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.1.14 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03853

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2008-5512

ubuntu

больше 16 лет назад

CVE-2008-5512

redhat

больше 16 лет назад

CVE-2008-5512

debian

больше 16 лет назад

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0 ...

GHSA-3rgf-mp4w-9hj8

github

около 3 лет назад

ELSA-2008-1036

oracle-oval

больше 16 лет назад

ELSA-2008-1036: firefox security update (CRITICAL)

EPSS

Процентиль: 88%

0.03853

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-264