CVE-2008-5513

Опубликовано: 17 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.

Ссылки

http://secunia.com/advisories/33184
Third Party Advisory
http://secunia.com/advisories/33188
Third Party Advisory
http://secunia.com/advisories/33189
Third Party Advisory
http://secunia.com/advisories/33203
Third Party Advisory
http://secunia.com/advisories/33216
Third Party Advisory
http://secunia.com/advisories/33231
Third Party Advisory
http://secunia.com/advisories/33421
Third Party Advisory
http://secunia.com/advisories/33523
Third Party Advisory
http://secunia.com/advisories/34501
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Broken Link
http://www.debian.org/security/2009/dsa-1707
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:244
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:245
Third Party Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-69.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-1036.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-1037.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-0002.html
Third Party Advisory
http://www.securityfocus.com/bid/32882
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1021421
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-690-2
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.0.5 (исключая)

cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.1.14 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.0.19 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01096

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-5513

ubuntu

больше 17 лет назад

CVE-2008-5513

redhat

больше 17 лет назад

CVE-2008-5513

debian

больше 17 лет назад

Unspecified vulnerability in the session-restore feature in Mozilla Fi ...

GHSA-wpm2-x35v-w8w6

github

почти 4 года назад

ELSA-2008-1036

oracle-oval

больше 17 лет назад

ELSA-2008-1036: firefox security update (CRITICAL)

EPSS

Процентиль: 78%

0.01096

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79