Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-5504

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2008-5504
Last Modified 21 Aug 2010 01:26:25
Published 17 Dec 2008 06:30:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-5504

Summary

Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

Vulnerable Systems

Application

  • Mozilla Firefox 2.0

  • Mozilla Firefox 2.0.0.1

  • Mozilla Firefox 2.0.0.10

  • Mozilla Firefox 2.0.0.11

  • Mozilla Firefox 2.0.0.12

  • Mozilla Firefox 2.0.0.13

  • Mozilla Firefox 2.0.0.14

  • Mozilla Firefox 2.0.0.15

  • Mozilla Firefox 2.0.0.16

  • Mozilla Firefox 2.0.0.17

  • Mozilla Firefox 2.0.0.18

  • Mozilla Firefox 2.0.0.2

  • Mozilla Firefox 2.0.0.3

  • Mozilla Firefox 2.0.0.4

  • Mozilla Firefox 2.0.0.5

  • Mozilla Firefox 2.0.0.6

  • Mozilla Firefox 2.0.0.7

  • Mozilla Firefox 2.0.0.8

  • Mozilla Firefox 2.0.0.9


References

MISC - https://bugzilla.mozilla.org/show_bug.cgi?id=453526

XF - firefox-feedpreview-code-execution(47410)

VUPEN - ADV-2009-0977

UBUNTU - USN-690-2

SECTRACK - 1021422

BID - 32882

REDHAT - RHSA-2008:1037

CONFIRM - http://www.mozilla.org/security/announce/2008/mfsa2008-62.html

MANDRIVA - MDVSA-2008:244

DEBIAN - DSA-1707

SUNALERT - 256408

SECUNIA - 34501

SECUNIA - 33523

SECUNIA - 33231

SECUNIA - 33189

SECUNIA - 33184

Related Patches

Mozilla Firefox 2.0.0.20 for Windows (Update)


Last Updated: 27 May 2016 10:48:49