CVE-2008-5913

2009-01-2000:00:00

ubuntu.com

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

65.4%

JSON

The Math.random function in the JavaScript implementation in Mozilla
Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
2.0.5, uses a random number generator that is seeded only once per browser
session, which makes it easier for remote attackers to track a user, or
trick a user into acting upon a spoofed pop-up message, by calculating the
seed value, related to a “temporary footprint” and an “in-session phishing
attack.”

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox< 3.6.6+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9.2< 1.9.2.6+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9.2< 1.9.2.7+build2+nobinonly-0ubuntu0.9.04.2UNKNOWN
ubuntu9.10noarchxulrunner-1.9.2< 1.9.2.7+build2+nobinonly-0ubuntu0.9.10.2UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2< 1.9.2.6+nobinonly-0ubuntu0.10.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	firefox	< 3.6.6+nobinonly-0ubuntu0.10.04.1	UNKNOWN
ubuntu	8.04	noarch	xulrunner-1.9.2	< 1.9.2.6+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	9.04	noarch	xulrunner-1.9.2	< 1.9.2.7+build2+nobinonly-0ubuntu0.9.04.2	UNKNOWN
ubuntu	9.10	noarch	xulrunner-1.9.2	< 1.9.2.7+build2+nobinonly-0ubuntu0.9.10.2	UNKNOWN
ubuntu	10.04	noarch	xulrunner-1.9.2	< 1.9.2.6+nobinonly-0ubuntu0.10.04.1	UNKNOWN