CVE-2008-5015

2008-11-1300:00:00

ubuntu.com

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.8%

JSON

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI
when it is accessed in the same tab from a chrome or privileged about:
page, which makes it easier for user-assisted attackers to execute
arbitrary JavaScript with chrome privileges via malicious code in a file
that has already been saved on the local system.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.15~prepatch080614h-0ubuntu1UNKNOWN
ubuntu7.10noarchfirefox< 2.0.0.18+nobinonly-0ubuntu0.7.10UNKNOWN
ubuntu8.04noarchfirefox< 2.0.0.19+nobinonly1-0ubuntu0.8.04.1UNKNOWN
ubuntu8.04noarchfirefox-3.0< 3.0.4+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchfirefox-3.0< 3.0.4+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9< 1.9.0.4+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9< 1.9.0.4+nobinonly-0ubuntu0.8.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.15~prepatch080614h-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	firefox	< 2.0.0.18+nobinonly-0ubuntu0.7.10	UNKNOWN
ubuntu	8.04	noarch	firefox	< 2.0.0.19+nobinonly1-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.04	noarch	firefox-3.0	< 3.0.4+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	firefox-3.0	< 3.0.4+nobinonly-0ubuntu0.8.10.1	UNKNOWN
ubuntu	8.04	noarch	xulrunner-1.9	< 1.9.0.4+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	xulrunner-1.9	< 1.9.0.4+nobinonly-0ubuntu0.8.10.1	UNKNOWN