CVE-2008-5023

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=424733	Issue Tracking Vendor Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-57.html	Vendor Advisory
http://www.securityfocus.com/bid/32281	Third Party Advisory VDB Entry
http://www.mandriva.com/security/advisories?name=MDVSA-2008:228	Third Party Advisory
http://secunia.com/advisories/32721	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html	Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-319A.html	Third Party Advisory US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html	Third Party Advisory
http://secunia.com/advisories/32845	Third Party Advisory
http://www.debian.org/security/2008/dsa-1669	Third Party Advisory
http://secunia.com/advisories/32693	Third Party Advisory
http://secunia.com/advisories/32695	Third Party Advisory
http://secunia.com/advisories/32694	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0977.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0978.html	Third Party Advisory
http://secunia.com/advisories/32714	Third Party Advisory
http://www.debian.org/security/2008/dsa-1671	Third Party Advisory
http://www.vupen.com/english/advisories/2009/0977	Third Party Advisory
http://secunia.com/advisories/34501	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1	Broken Link
http://www.securitytracker.com/id?1021189	Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/3146	Third Party Advisory
http://secunia.com/advisories/32684	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230	Third Party Advisory
http://secunia.com/advisories/32713	Third Party Advisory
http://ubuntu.com/usn/usn-667-1	Third Party Advisory
http://secunia.com/advisories/32853	Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html	Third Party Advisory
http://secunia.com/advisories/32778	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9908	Third Party Advisory

Configuration 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

---

Published : 2008-11-13 11:30

Updated : 2018-11-02 01:49

---

NVD link : CVE-2008-5023

Mitre link : CVE-2008-5023

No products.

CWE-20