CVEvulnerability
CVE-2008-5511
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."
Affected configurations
• mozilla firefox (>= 2.0 < 2.0.0.19)
• mozilla firefox (>= 3.0 < 3.0.5)
• mozilla seamonkey (>= 1.0 < 1.1.14)
• mozilla thunderbird (>= 2.0 < 2.0.0.19)
• canonical ubuntu linux 6.06
• canonical ubuntu linux 7.10
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• debian debian linux 4.0
• debian debian linux 5.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33232 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-68.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021418 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=451680 Issue Tracking, Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=464174 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47417 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11881 Third Party Advisory
- https://usn.ubuntu.com/690-1/ Third Party Advisory
- https://usn.ubuntu.com/690-3/ Third Party Advisory
- http://secunia.com/advisories/33184 Third Party Advisory
- http://secunia.com/advisories/33188 Third Party Advisory
- http://secunia.com/advisories/33189 Third Party Advisory
- http://secunia.com/advisories/33203 Third Party Advisory
- http://secunia.com/advisories/33204 Third Party Advisory
- http://secunia.com/advisories/33205 Third Party Advisory
- http://secunia.com/advisories/33216 Third Party Advisory
- http://secunia.com/advisories/33231 Third Party Advisory
- http://secunia.com/advisories/33232 Third Party Advisory
- http://secunia.com/advisories/33408 Third Party Advisory
- http://secunia.com/advisories/33415 Third Party Advisory
- http://secunia.com/advisories/33421 Third Party Advisory
- http://secunia.com/advisories/33433 Third Party Advisory
- http://secunia.com/advisories/33434 Third Party Advisory
- http://secunia.com/advisories/33523 Third Party Advisory
- http://secunia.com/advisories/33547 Third Party Advisory
- http://secunia.com/advisories/34501 Third Party Advisory
- http://secunia.com/advisories/35080 Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 Broken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 Broken Link
- http://www.debian.org/security/2009/dsa-1696 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1697 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1704 Third Party Advisory
- http://www.debian.org/security/2009/dsa-1707 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-68.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1036.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1037.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0002.html Third Party Advisory
- http://www.securityfocus.com/bid/32882 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021418 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-690-2 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-1 Third Party Advisory
- http://www.ubuntu.com/usn/usn-701-2 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/0977 Third Party Advisory