CVEvulnerability
CVE-2008-5505
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies.
Affected configurations
• mozilla firefox (<= 3.0.4)
• mozilla firefox 3.0
• mozilla firefox 3.0.1
• mozilla firefox 3.0.2
• mozilla firefox 3.0.3
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33188 secunia.com
- http://secunia.com/advisories/33203 secunia.com
- http://secunia.com/advisories/33216 secunia.com
- http://secunia.com/advisories/34501 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 sunsolve.sun.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 www.mandriva.com
- http://www.mozilla.org/security/announce/2008/mfsa2008-63.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html www.redhat.com
- http://www.securityfocus.com/bid/32882 www.securityfocus.com
- http://www.securitytracker.com/id?1021428 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0977 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=295994 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47411 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10443 oval.cisecurity.org
- https://usn.ubuntu.com/690-1/ usn.ubuntu.com
- http://secunia.com/advisories/33188 secunia.com
- http://secunia.com/advisories/33203 secunia.com
- http://secunia.com/advisories/33216 secunia.com
- http://secunia.com/advisories/34501 secunia.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 sunsolve.sun.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 www.mandriva.com
- http://www.mozilla.org/security/announce/2008/mfsa2008-63.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html www.redhat.com
- http://www.securityfocus.com/bid/32882 www.securityfocus.com
- http://www.securitytracker.com/id?1021428 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/0977 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=295994 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47411 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10443 oval.cisecurity.org
- https://usn.ubuntu.com/690-1/ usn.ubuntu.com