VulnerabilityModified

CVE-2008-5507

MEDIUM 6.0EPSS 1.66%

Does this matter?

Lower severity and a low EPSS score (1.66%). Track it; it rarely justifies an emergency change on its own.

Description

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.

CVSS 2.0: 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS: 1.66% probability · 75th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: mozilla/firefox · mozilla/seamonkey · mozilla/thunderbird · canonical/ubuntu linux · debian/debian linux
Source: secalert@redhat.com

References

http://scary.beasts.org/security/CESA-2008-011.htmlThird Party Advisory
http://secunia.com/advisories/33184Third Party Advisory
http://secunia.com/advisories/33188Third Party Advisory
http://secunia.com/advisories/33189Third Party Advisory
http://secunia.com/advisories/33203Third Party Advisory
http://secunia.com/advisories/33204Third Party Advisory
http://secunia.com/advisories/33205Third Party Advisory
http://secunia.com/advisories/33216Third Party Advisory
http://secunia.com/advisories/33231Third Party Advisory
http://secunia.com/advisories/33232Third Party Advisory
http://secunia.com/advisories/33408Third Party Advisory
http://secunia.com/advisories/33415Third Party Advisory
http://secunia.com/advisories/33421Third Party Advisory
http://secunia.com/advisories/33433Third Party Advisory
http://secunia.com/advisories/33434Third Party Advisory
http://secunia.com/advisories/33523Third Party Advisory
http://secunia.com/advisories/33547Third Party Advisory
http://secunia.com/advisories/34501Third Party Advisory
http://secunia.com/advisories/35080Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1Broken Link
http://www.debian.org/security/2009/dsa-1696Third Party Advisory
http://www.debian.org/security/2009/dsa-1697Third Party Advisory
http://www.debian.org/security/2009/dsa-1704Third Party Advisory
http://www.debian.org/security/2009/dsa-1707Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:244Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:245Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:012Third Party Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-65.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-1036.htmlThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.