Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5503
HistoryDec 17, 2008 - 11:30 p.m.

CVE-2008-5503

2008-12-1723:30:00
[email protected]
web.nvd.nist.gov
51
cve-2008-5503
mozilla
firefox
thunderbird
seamonkey
same-domain policy
security check

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

9.6 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.4%

JSON

The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.

Affected configurations

NVD
Node
mozillafirefoxRange≤2.0.0.18
OR
mozillafirefoxMatch2.0
OR
mozillafirefoxMatch2.0.0.1
OR
mozillafirefoxMatch2.0.0.2
OR
mozillafirefoxMatch2.0.0.3
OR
mozillafirefoxMatch2.0.0.4
OR
mozillafirefoxMatch2.0.0.5
OR
mozillafirefoxMatch2.0.0.6
OR
mozillafirefoxMatch2.0.0.7
OR
mozillafirefoxMatch2.0.0.8
OR
mozillafirefoxMatch2.0.0.9
OR
mozillafirefoxMatch2.0.0.10
OR
mozillafirefoxMatch2.0.0.11
OR
mozillafirefoxMatch2.0.0.12
OR
mozillafirefoxMatch2.0.0.13
OR
mozillafirefoxMatch2.0.0.14
OR
mozillafirefoxMatch2.0.0.15
OR
mozillafirefoxMatch2.0.0.16
OR
mozillafirefoxMatch2.0.0.17
OR
mozillaseamonkeyRange≤1.1.13
OR
mozillaseamonkeyMatch1.0
OR
mozillaseamonkeyMatch1.0.1
OR
mozillaseamonkeyMatch1.0.2
OR
mozillaseamonkeyMatch1.0.3
OR
mozillaseamonkeyMatch1.0.5
OR
mozillaseamonkeyMatch1.0.6
OR
mozillaseamonkeyMatch1.0.7
OR
mozillaseamonkeyMatch1.0.8
OR
mozillaseamonkeyMatch1.0.9
OR
mozillaseamonkeyMatch1.1
OR
mozillaseamonkeyMatch1.1alpha
OR
mozillaseamonkeyMatch1.1beta
OR
mozillaseamonkeyMatch1.1.1
OR
mozillaseamonkeyMatch1.1.2
OR
mozillaseamonkeyMatch1.1.3
OR
mozillaseamonkeyMatch1.1.4
OR
mozillaseamonkeyMatch1.1.5
OR
mozillaseamonkeyMatch1.1.6
OR
mozillaseamonkeyMatch1.1.7
OR
mozillaseamonkeyMatch1.1.8
OR
mozillaseamonkeyMatch1.1.9
OR
mozillaseamonkeyMatch1.1.10
OR
mozillaseamonkeyMatch1.1.11
OR
mozillaseamonkeyMatch1.1.12
OR
mozillathunderbirdRange≤2.0.0.18
OR
mozillathunderbirdMatch2.0.0.0
OR
mozillathunderbirdMatch2.0.0.4
OR
mozillathunderbirdMatch2.0.0.5
OR
mozillathunderbirdMatch2.0.0.6
OR
mozillathunderbirdMatch2.0.0.9
OR
mozillathunderbirdMatch2.0.0.12
OR
mozillathunderbirdMatch2.0.0.14
OR
mozillathunderbirdMatch2.0.0.16
OR
mozillathunderbirdMatch2.0.0.17

References

Related

prion 1
mozilla 1
securityvulns 2
veracode 1
ubuntucve 1
nvd 1
cvelist 1
ubuntu 4
openvas 104
debian 4
nessus 44
osv 4
fedora 20
centos 3
redhat 2
oraclelinux 2
suse 3
freebsd 1
prion
prion
Security feature bypass
2008-12-17 23:30:00
mozilla
mozilla
Information stealing via loadBindingDocument — Mozilla
2008-12-16 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-61
2008-12-18 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple seucrity vulnerabilities
2008-12-19 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:28:10
ubuntucve
ubuntucve
CVE-2008-5503
2008-12-17 00:00:00
nvd
nvd
CVE-2008-5503
2008-12-17 23:30:00
cvelist
cvelist
CVE-2008-5503
2008-12-17 23:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2008-12-18 00:00:00
Thunderbird vulnerabilities
2009-01-06 00:00:00
Thunderbird vulnerabilities
2009-01-06 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-690-3)
2009-03-23 00:00:00
Ubuntu Update for firefox vulnerabilities USN-690-3
2009-03-23 00:00:00
Debian Security Advisory DSA 1704-1 (xulrunner)
2009-01-20 00:00:00
debian
debian
[SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities
2009-01-14 20:28:56
[SECURITY] [DSA 1707-1] New iceweasel packages fix several vulnerabilities
2009-01-15 22:03:27
[SECURITY] [DSA 1696-1] New icedove packages fix several vulnerabilities
2009-01-07 21:32:09
nessus
nessus
Debian DSA-1704-1 : xulrunner - several vulnerabilities
2009-01-15 00:00:00
Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-701-2)
2013-03-09 00:00:00
SuSE9 Security Update : Epiphany (YOU Patch Number 12326)
2009-09-24 00:00:00
osv
osv
xulrunner - several vulnerabilities
2009-01-14 00:00:00
iceweasel - several vulnerabilities
2009-01-15 00:00:00
icedove - several vulnerabilities
2009-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: seamonkey-1.1.14-1.fc10
2008-12-21 08:40:41
[SECURITY] Fedora 9 Update: seamonkey-1.1.14-1.fc9
2008-12-21 08:44:36
[SECURITY] Fedora 8 Update: seamonkey-1.1.14-1.fc8
2008-12-21 08:25:27
centos
centos
thunderbird security update
2009-01-08 14:35:58
seamonkey security update
2008-12-22 02:56:59
seamonkey security update
2008-12-17 15:28:51
redhat
redhat
(RHSA-2009:0002) Moderate: thunderbird security update
2009-01-07 00:00:00
(RHSA-2008:1037) Critical: seamonkey security update
2008-12-16 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2009-01-07 00:00:00
seamonkey security update
2008-12-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,seamonkey
2008-12-19 13:50:24
remote code execution in MozillaFirefox,MozillaThunderbird,mozilla
2009-01-14 11:55:45
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2008-12-17 00:00:00

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

9.6 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.4%

JSON
Related for CVE-2008-5503
prion1mozilla1securityvulns2veracode1ubuntucve1nvd1cvelist1ubuntu4openvas104debian4nessus44osv4fedora20centos3redhat2oraclelinux2suse3freebsd1