CVEvulnerability
CVE-2008-1235
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."
Affected configurations
• mozilla firefox (<= 2.0.0.12)
• mozilla firefox 0.1
• mozilla firefox 0.2
• mozilla firefox 0.4
• mozilla firefox 0.5
• mozilla firefox 0.6
• mozilla firefox 0.6.1
• mozilla firefox 0.7
• mozilla firefox 0.7.1
• mozilla firefox 0.8
• mozilla firefox 0.9
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 1.0
• mozilla firefox 1.0.1
• mozilla firefox 1.0.2
• mozilla firefox 1.0.3
• mozilla firefox 1.0.4
• mozilla firefox 1.0.5
• mozilla firefox 1.0.6
• mozilla firefox 1.0.7
• mozilla firefox 1.0.8
• mozilla firefox 1.5
• mozilla firefox 1.5.0.1
• mozilla firefox 1.5.0.2
• mozilla firefox 1.5.0.3
• mozilla firefox 1.5.0.4
• mozilla firefox 1.5.0.5
• mozilla firefox 1.5.0.6
• mozilla firefox 1.5.0.7
• mozilla firefox 1.5.0.8
• mozilla firefox 1.5.0.9
• mozilla firefox 1.5.0.10
• mozilla firefox 1.5.0.11
• mozilla firefox 1.5.0.12
• mozilla firefox 2.0
• mozilla firefox 2.0.0.1
• mozilla firefox 2.0.0.2
• mozilla firefox 2.0.0.3
• mozilla firefox 2.0.0.4
• mozilla firefox 2.0.0.5
• mozilla firefox 2.0.0.6
• mozilla firefox 2.0.0.7
• mozilla firefox 2.0.0.8
• mozilla firefox 2.0.0.9
• mozilla firefox 2.0.0.10
• mozilla firefox 2.0.0.11
• mozilla seamonkey (<= 1.1.8)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
… and 40 more
References
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2008-0208.html rhn.redhat.com
- http://secunia.com/advisories/29391 Vendor Advisory
- http://secunia.com/advisories/29526 Vendor Advisory
- http://secunia.com/advisories/29539 Vendor Advisory
- http://secunia.com/advisories/29541 Vendor Advisory
- http://secunia.com/advisories/29547 Vendor Advisory
- http://secunia.com/advisories/29548 Vendor Advisory
- http://secunia.com/advisories/29550 Vendor Advisory
- http://secunia.com/advisories/29558 Vendor Advisory
- http://secunia.com/advisories/29560 Vendor Advisory
- http://secunia.com/advisories/29607 Vendor Advisory
- http://secunia.com/advisories/29616 Vendor Advisory
- http://secunia.com/advisories/29645 Vendor Advisory
- http://secunia.com/advisories/30016 Vendor Advisory
- http://secunia.com/advisories/30094 Vendor Advisory
- http://secunia.com/advisories/30105 Vendor Advisory
- http://secunia.com/advisories/30192 Vendor Advisory
- http://secunia.com/advisories/30327 Vendor Advisory
- http://secunia.com/advisories/30370 Vendor Advisory
- http://secunia.com/advisories/30620 Vendor Advisory
- http://secunia.com/advisories/31043 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 sunsolve.sun.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 wiki.rpath.com
- http://www.debian.org/security/2008/dsa-1532 www.debian.org
- http://www.debian.org/security/2008/dsa-1534 www.debian.org
- http://www.debian.org/security/2008/dsa-1535 www.debian.org
- http://www.debian.org/security/2008/dsa-1574 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml www.gentoo.org
- http://www.kb.cert.org/vuls/id/466521 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:155 www.mandriva.com
- http://www.mozilla.org/security/announce/2008/mfsa2008-14.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0207.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0209.html www.redhat.com
- http://www.securityfocus.com/archive/1/490196/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28448 www.securityfocus.com
- http://www.securitytracker.com/id?1019694 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313 www.slackware.com
- http://www.ubuntu.com/usn/usn-592-1 www.ubuntu.com
- http://www.ubuntu.com/usn/usn-605-1 www.ubuntu.com
- http://www.us-cert.gov/cas/techalerts/TA08-087A.html US Government Resource
- http://www.vupen.com/english/advisories/2008/0998/references Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0999/references Vendor Advisory
- http://www.vupen.com/english/advisories/2008/1793/references Vendor Advisory
- http://www.vupen.com/english/advisories/2008/2091/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41457 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html www.redhat.com
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2008-0208.html rhn.redhat.com
- http://secunia.com/advisories/29391 Vendor Advisory
- http://secunia.com/advisories/29526 Vendor Advisory
- http://secunia.com/advisories/29539 Vendor Advisory
- http://secunia.com/advisories/29541 Vendor Advisory
- http://secunia.com/advisories/29547 Vendor Advisory
- http://secunia.com/advisories/29548 Vendor Advisory
- http://secunia.com/advisories/29550 Vendor Advisory
- http://secunia.com/advisories/29558 Vendor Advisory
- http://secunia.com/advisories/29560 Vendor Advisory
- http://secunia.com/advisories/29607 Vendor Advisory
- http://secunia.com/advisories/29616 Vendor Advisory
- http://secunia.com/advisories/29645 Vendor Advisory
- http://secunia.com/advisories/30016 Vendor Advisory
- http://secunia.com/advisories/30094 Vendor Advisory
- http://secunia.com/advisories/30105 Vendor Advisory
- http://secunia.com/advisories/30192 Vendor Advisory
- http://secunia.com/advisories/30327 Vendor Advisory
- http://secunia.com/advisories/30370 Vendor Advisory
- http://secunia.com/advisories/30620 Vendor Advisory
- http://secunia.com/advisories/31043 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 sunsolve.sun.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 wiki.rpath.com
- http://www.debian.org/security/2008/dsa-1532 www.debian.org
- http://www.debian.org/security/2008/dsa-1534 www.debian.org
- http://www.debian.org/security/2008/dsa-1535 www.debian.org
- http://www.debian.org/security/2008/dsa-1574 www.debian.org