Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5506
HistoryDec 17, 2008 - 11:30 p.m.

CVE-2008-5506

2008-12-1723:30:00
CWE-264
[email protected]
web.nvd.nist.gov
52
cve-2008-5506
mozilla firefox
thunderbird
seamonkey
same origin policy
xmlhttprequest
security vulnerability

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.3%

JSON

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka “response disclosure.”

References

Related

veracode 1
securityvulns 1
prion 1
ubuntucve 1
openvas 115
mozilla 1
ubuntu 4
nessus 36
osv 2
debian 2
fedora 31
redhat 1
oraclelinux 1
centos 2
veracode
veracode
Same-Origin Policy Bypass
2020-04-10 00:28:10
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-64
2008-12-18 00:00:00
prion
prion
Design/Logic Flaw
2008-12-17 23:30:00
ubuntucve
ubuntucve
CVE-2008-5506
2008-12-17 00:00:00
openvas
openvas
Solaris Update for Mozilla 1.7 125541-04
2009-06-03 00:00:00
Solaris Update for Mozilla Thunderbird email client 125542-04
2009-06-03 00:00:00
Solaris Update for Mozilla Thunderbird email client 125542-04
2009-06-03 00:00:00
mozilla
mozilla
XMLHttpRequest 302 response disclosure — Mozilla
2008-12-16 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2008-12-18 00:00:00
Thunderbird vulnerabilities
2009-01-06 00:00:00
Thunderbird vulnerabilities
2009-01-06 00:00:00
nessus
nessus
Debian DSA-1704-1 : xulrunner - several vulnerabilities
2009-01-15 00:00:00
Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-701-2)
2013-03-09 00:00:00
SuSE 10 Security Update : Epiphany (ZYPP Patch Number 5889)
2009-09-24 00:00:00
osv
osv
xulrunner - several vulnerabilities
2009-01-14 00:00:00
iceweasel - several vulnerabilities
2009-01-15 00:00:00
debian
debian
[SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities
2009-01-14 20:29:20
[SECURITY] [DSA 1707-1] New iceweasel packages fix several vulnerabilities
2009-01-15 22:03:47
fedora
fedora
[SECURITY] Fedora 9 Update: seamonkey-1.1.14-1.fc9
2008-12-21 08:44:36
[SECURITY] Fedora 8 Update: seamonkey-1.1.14-1.fc8
2008-12-21 08:25:27
[SECURITY] Fedora 10 Update: seamonkey-1.1.14-1.fc10
2008-12-21 08:40:41
redhat
redhat
(RHSA-2009:0002) Moderate: thunderbird security update
2009-01-07 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2009-01-07 00:00:00
centos
centos
thunderbird security update
2009-01-08 14:35:58
seamonkey security update
2008-12-22 02:56:59

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.3%

JSON
Related for CVE-2008-5506
veracode1securityvulns1prion1ubuntucve1openvas115mozilla1ubuntu4nessus36osv2debian2fedora31redhat1oraclelinux1centos2