CVE-2008-6961

2009-08-1300:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

75.0%

JSON

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before
1.1.13, when JavaScript is enabled in mail, allows remote attackers to
obtain sensitive information about the recipient, or comments in forwarded
mail, via script that reads the (1) .documentURI or (2) .textContent DOM
properties.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchseamonkey< 1.1.15+nobinonly-0ubuntu0.8.04.2UNKNOWN
ubuntu8.10noarchseamonkey< 1.1.15+nobinonly-0ubuntu0.8.10.2UNKNOWN
ubuntu8.04noarchthunderbird< 2.0.0.22+build1+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchthunderbird< 2.0.0.22+build1+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchthunderbird< 2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	seamonkey	< 1.1.15+nobinonly-0ubuntu0.8.04.2	UNKNOWN
ubuntu	8.10	noarch	seamonkey	< 1.1.15+nobinonly-0ubuntu0.8.10.2	UNKNOWN
ubuntu	8.04	noarch	thunderbird	< 2.0.0.22+build1+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	thunderbird	< 2.0.0.22+build1+nobinonly-0ubuntu0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	thunderbird	< 2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1	UNKNOWN