Published: 07/07/2008 Updated: 11/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Mozilla Firefox prior to 2.0.0.15 and SeaMonkey prior to 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote malicious users to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 2.0.0.12
mozilla firefox 2.0.0.13
mozilla firefox 2.0.0.8
mozilla firefox 2.0.0.9
mozilla seamonkey 1.1.8
mozilla firefox
mozilla firefox 2.0.0.10
mozilla firefox 2.0.0.11
mozilla firefox 2.0.0.6
mozilla firefox 2.0.0.7
mozilla seamonkey 1.1.6
mozilla seamonkey 1.1.7
mozilla firefox 2.0
mozilla firefox 2.0.0.1
mozilla firefox 2.0.0.4
mozilla firefox 2.0.0.5
mozilla seamonkey 1.1.4
mozilla seamonkey 1.1.5
mozilla firefox 2.0.0.2
mozilla firefox 2.0.0.3
mozilla seamonkey 1.1
mozilla seamonkey 1.1.2
mozilla seamonkey 1.1.3
mozilla seamonkey

Various flaws were discovered in the browser engine By tricking a user into opening a malicious web page, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2008-2798, CVE-2008-2799) ...

Several remote vulnerabilities have been discovered in Iceape an unbranded version of the Seamonkey internet suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer overflow in the parser for UTF-8 URLs, which may lead to the ex ...

Mozilla Foundation Security Advisory 2008-32 Remote site run as local file via Windows URL shortcut Announced July 1, 2008 Reporter Geoff ("misterffoeg") Impact Moderate Products Firefox, SeaMonkey Fixed in ...

CVE-2008-2810

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect