Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-3837

Overview

Vulnerability Score 9.3 9.3
CVE Id CVE-2008-3837
Last Modified 29 Oct 2012 11:15:50
Published 24 Sep 2008 04:37:04
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2008-3837

Summary

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.

Vulnerable Systems

Application

  • Mozilla Firefox 0.10

  • Mozilla Firefox 0.10.1

  • Mozilla Firefox 0.8

  • Mozilla Firefox 0.9

  • Mozilla Firefox 0.9 Rc

  • Mozilla Firefox 0.9.1

  • Mozilla Firefox 0.9.2

  • Mozilla Firefox 0.9.3

  • Mozilla Firefox 1.0

  • Mozilla Firefox 1.0.1

  • Mozilla Firefox 1.0.2

  • Mozilla Firefox 1.0.3

  • Mozilla Firefox 1.0.4

  • Mozilla Firefox 1.0.5

  • Mozilla Firefox 1.0.6

  • Mozilla Firefox 1.0.7

  • Mozilla Firefox 1.0.8

  • Mozilla Firefox 1.5

  • Mozilla Firefox 1.5.0.1

  • Mozilla Firefox 1.5.0.10

  • Mozilla Firefox 1.5.0.11

  • Mozilla Firefox 1.5.0.12

  • Mozilla Firefox 1.5.0.2

  • Mozilla Firefox 1.5.0.3

  • Mozilla Firefox 1.5.0.4

  • Mozilla Firefox 1.5.0.5

  • Mozilla Firefox 1.5.0.6

  • Mozilla Firefox 1.5.0.7

  • Mozilla Firefox 1.5.0.8

  • Mozilla Firefox 1.5.0.9

  • Mozilla Firefox 1.5.1

  • Mozilla Firefox 1.5.2

  • Mozilla Firefox 1.5.3

  • Mozilla Firefox 1.5.4

  • Mozilla Firefox 1.5.5

  • Mozilla Firefox 1.5.6

  • Mozilla Firefox 1.5.7

  • Mozilla Firefox 1.5.8

  • Mozilla Firefox 1.8

  • Mozilla Firefox 2.0

  • Mozilla Firefox 2.0.0.1

  • Mozilla Firefox 2.0.0.10

  • Mozilla Firefox 2.0.0.11

  • Mozilla Firefox 2.0.0.12

  • Mozilla Firefox 2.0.0.13

  • Mozilla Firefox 2.0.0.14

  • Mozilla Firefox 2.0.0.15

  • Mozilla Firefox 2.0.0.16

  • Mozilla Seamonkey

  • Mozilla Seamonkey 1.0

  • Mozilla Seamonkey 1.0.1

  • Mozilla Seamonkey 1.0.2

  • Mozilla Seamonkey 1.0.3

  • Mozilla Seamonkey 1.0.4

  • Mozilla Seamonkey 1.0.5

  • Mozilla Seamonkey 1.0.6

  • Mozilla Seamonkey 1.0.7

  • Mozilla Seamonkey 1.0.8

  • Mozilla Seamonkey 1.0.9

  • Mozilla Seamonkey 1.0.99

  • Mozilla Seamonkey 1.1

  • Mozilla Seamonkey 1.1.1

  • Mozilla Seamonkey 1.1.10

  • Mozilla Seamonkey 1.1.11


References

CONFIRM - https://bugzilla.mozilla.org/show_bug.cgi?id=329385

FEDORA - FEDORA-2008-8429

FEDORA - FEDORA-2008-8401

FEDORA - FEDORA-2008-8425

XF - firefox-draganddrop-weak-security(45348)

VUPEN - ADV-2009-0977

VUPEN - ADV-2008-2661

UBUNTU - USN-645-2

UBUNTU - USN-645-1

SECTRACK - 1020922

BID - 31346

REDHAT - RHSA-2008:0882

REDHAT - RHSA-2008:0879

CONFIRM - http://www.mozilla.org/security/announce/2008/mfsa2008-40.html

MANDRIVA - MDVSA-2008:205

DEBIAN - DSA-1697

DEBIAN - DSA-1669

SUNALERT - 256408

SLACKWARE - SSA:2008-269-01

SLACKWARE - SSA:2008-269-02

SECUNIA - 34501

SECUNIA - 33433

SECUNIA - 32845

SECUNIA - 32144

SECUNIA - 32096

SECUNIA - 32095

SECUNIA - 32089

SECUNIA - 32044

SECUNIA - 32042

SECUNIA - 32012

SECUNIA - 32011

SECUNIA - 32010

SECUNIA - 31987

SECUNIA - 31985

SECUNIA - 31984

SUSE - SUSE-SA:2008:050

CONFIRM - http://download.novell.com/Download?buildid=WZXONb-tqBw~

DEBIAN - DSA-1649

SECUNIA - 32196

SECUNIA - 32185

Related Patches

Novell SUSE 2008:5654 gecko-sdk security update for SLE 10 i586


Last Updated: 27 May 2016 10:49:44