Lucene search
Mozilla FoundationMFSA2008-53HistoryNov 12, 2008 - 12:00 a.m.
XSS and JavaScript privilege escalation via session restore — Mozilla
2008-11-1200:00:00
Mozilla Foundation
www.mozilla.org
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
55.3%
Security researcher David Bloom reported that the browser’s session restore feature can be used to violate the same-origin policy and run JavaScript in the context of another site. Any otherwise unexploitable crash can be used to force the user into the session restore state
Related
ubuntucve
ubuntucve
CVE-2008-5019
2008-11-13 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2020-04-10 00:27:17
prion
prion
Cross site scripting
2008-11-13 11:30:00
Design/Logic Flaw
2009-03-26 10:12:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-53
2008-11-14 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2008-11-14 00:00:00
cve
cve
CVE-2008-5019
2008-11-13 11:30:00
CVE-2008-4317
2009-03-26 10:12:00
nessus
nessus
openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-333)
2009-07-21 00:00:00
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5825)
2008-11-25 00:00:00
CentOS 4 / 5 : firefox (CESA-2008:0978)
2010-01-06 00:00:00
openvas
openvas
Mandriva Update for firefox MDVSA-2008:230 (firefox)
2009-04-09 00:00:00
Mandriva Update for firefox MDVSA-2008:230 (firefox)
2009-04-09 00:00:00
CentOS Update for firefox CESA-2008:0978 centos4 i386
2009-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-5.fc9
2008-11-14 12:52:41
[SECURITY] Fedora 9 Update: ruby-gnome2-0.17.0-3.fc9
2008-11-14 12:52:42
[SECURITY] Fedora 9 Update: kazehakase-0.5.6-1.fc9.1
2008-11-14 12:52:42
redhat
redhat
(RHSA-2008:0978) Critical: firefox security update
2008-11-12 00:00:00
(RHSA-2008:0977) Critical: seamonkey security update
2008-11-12 00:00:00
oraclelinux
oraclelinux
firefox security update
2008-11-13 00:00:00
seamonkey security update
2008-11-13 00:00:00
centos
centos
devhelp, firefox, nss, xulrunner, yelp security update
2008-11-14 23:55:42
seamonkey security update
2008-11-13 14:22:44
seamonkey security update
2008-11-13 06:38:44
ubuntu
ubuntu
Firefox and xulrunner vulnerabilities
2008-11-17 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2008-11-26 16:19:10
freebsd
freebsd
mozilla -- multiple vulnerabilities
2008-11-13 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
55.3%
Related for MFSA2008-53