CVEvulnerability
CVE-2008-5507
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-200
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.
Affected configurations
• mozilla firefox (>= 2.0 < 2.0.0.19)
• mozilla firefox (>= 3.0 < 3.0.5)
• mozilla seamonkey (>= 1.0 < 1.1.14)
• mozilla thunderbird (>= 2.0 < 2.0.0.19)
• canonical ubuntu linux 6.06
• canonical ubuntu linux 7.10
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• debian debian linux 4.0
• debian debian linux 5.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://scary.beasts.org/security/CESA-2008-011.html Third Party Advisory
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33232 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-65.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/archive/1/499353/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021423 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=461735 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47413 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376 Third Party Advisory
- https://usn.ubuntu.com/690-1/ Third Party Advisory
- https://usn.ubuntu.com/690-3/ Third Party Advisory
- http://scary.beasts.org/security/CESA-2008-011.html Third Party Advisory
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33232 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-65.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/archive/1/499353/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021423 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory