CVEvulnerability
CVE-2008-5506
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
Affected configurations
• mozilla firefox (>= 2.0 < 2.0.0.19)
• mozilla firefox (>= 3.0 < 3.0.5)
• mozilla seamonkey (>= 1.0 < 1.1.14)
• mozilla thunderbird (>= 2.0 < 2.0.0.19)
• canonical ubuntu linux 6.06
• canonical ubuntu linux 7.10
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• debian debian linux 4.0
• debian debian linux 5.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33232 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-64.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021427 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=458248 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47412 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10512 Third Party Advisory
- https://usn.ubuntu.com/690-1/ Third Party Advisory
- https://usn.ubuntu.com/690-3/ Third Party Advisory
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33232 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-64.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021427 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=458248 Issue Tracking, Vendor Advisory