Published: 13/11/2008 Updated: 29/09/2017

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Mozilla Firefox 3.x prior to 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted malicious users to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 3.0
mozilla firefox
mozilla firefox 3.0.1
mozilla firefox 3.0.2

Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic An updated firefox package that fixes various security issues is nowavailable for Red Hat Enterprise Linux 4 and 5This update has been rated as having critical security impact by the RedHat Security Response Team ...

Liu Die Yu discovered an information disclosure vulnerability in Firefox when using saved url shortcut files If a user were tricked into downloading a crafted url file and a crafted HTML file, an attacker could steal information from the user’s cache (CVE-2008-4582) ...

Mozilla Foundation Security Advisory 2008-51 file: URIs inherit chrome privileges when opened from chrome Announced November 12, 2008 Reporter Luke Bryan Impact Moderate Products Firefox Fixed in ...

CWE-94 http://www.mozilla.org/security/announce/2008/mfsa2008-51.html https://bugzilla.mozilla.org/show_bug.cgi?id=447579 http://www.securityfocus.com/bid/32281 http://secunia.com/advisories/32721 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html http://www.us-cert.gov/cas/techalerts/TA08-319A.html http://secunia.com/advisories/32695 http://www.redhat.com/support/errata/RHSA-2008-0978.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 http://secunia.com/advisories/34501 http://www.vupen.com/english/advisories/2009/0977 http://www.securitytracker.com/id?1021191 http://www.vupen.com/english/advisories/2008/3146 http://ubuntu.com/usn/usn-667-1 http://www.mandriva.com/security/advisories?name=MDVSA-2008:230 http://secunia.com/advisories/32713 http://secunia.com/advisories/32778 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11063 https://access.redhat.com/errata/RHSA-2008:0978 https://usn.ubuntu.com/667-1/https://nvd.nist.gov

CVE-2008-5015

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect