CVE-2008-1233 Detail

CVE-2008-1233

CVE Descriptions

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection') The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Mozilla>>Firefox >> Version To (including) 2.0.0.12

Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version - (Open CPE detail)
Mozilla>>Firefox >> Version 0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 0.6.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 0.7.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.1 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.2 (Open CPE detail)
Mozilla>>Firefox >> Version 0.9.3 (Open CPE detail)
Mozilla>>Firefox >> Version 0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 0.10.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.4.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.0.12 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.1 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.2 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.3 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.4 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.5 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.6 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.7 (Open CPE detail)
Mozilla>>Firefox >> Version 1.5.8 (Open CPE detail)
Mozilla>>Firefox >> Version 1.8 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.1 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.2 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.3 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.4 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.5 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.6 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.7 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.8 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.9 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.10 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.11 (Open CPE detail)
Mozilla>>Firefox >> Version 2.0.0.12 (Open CPE detail)

Mozilla>>Seamonkey >> Version To (including) 1.1.8

Mozilla>>Seamonkey >> Version - (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.2 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.3 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.4 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.5 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.6 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.7 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.8 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.0.9 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.1 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.2 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.3 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.4 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.5 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.6 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.7 (Open CPE detail)
Mozilla>>Seamonkey >> Version 1.1.8 (Open CPE detail)

Mozilla>>Thunderbird >> Version To (including) 2.0.0.12

Mozilla>>Thunderbird >> Version - (Open CPE detail)
Mozilla>>Thunderbird >> Version - (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.3 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.7.3 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.1 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.2 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.7 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.8 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.10 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.12 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.13 (Open CPE detail)
Mozilla>>Thunderbird >> Version 1.5.0.14 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.0 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.4 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.5 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.6 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.9 (Open CPE detail)
Mozilla>>Thunderbird >> Version 2.0.0.12 (Open CPE detail)

References

http://www.securityfocus.com/archive/1/490196/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/29541
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29539
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mozilla.org/security/announce/2008/mfsa2008-14.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2008/0999/references
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/30620
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29560
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/41443
Tags : vdb-entry, x_refsource_XF

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11078
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.debian.org/security/2008/dsa-1532
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/30327
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.ubuntu.com/usn/usn-592-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/29616
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1019694
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/29550
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29645
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-605-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://secunia.com/advisories/29607
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.mandriva.com/security/advisories?name=MDVSA-2008:155
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.vupen.com/english/advisories/2008/1793/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.debian.org/security/2008/dsa-1574
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/29558
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29548
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30370
Tags : third-party-advisory, x_refsource_SECUNIA

http://rhn.redhat.com/errata/RHSA-2008-0208.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/29526
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/2091/references
Tags : vdb-entry, x_refsource_VUPEN

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.us-cert.gov/cas/techalerts/TA08-087A.html
Tags : third-party-advisory, x_refsource_CERT

http://secunia.com/advisories/29391
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30192
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.kb.cert.org/vuls/id/466521
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313
Tags : vendor-advisory, x_refsource_SLACKWARE

http://www.redhat.com/support/errata/RHSA-2008-0209.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.securityfocus.com/bid/28448
Tags : vdb-entry, x_refsource_BID

http://www.redhat.com/support/errata/RHSA-2008-0207.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/30016
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2008/dsa-1534
Tags : vendor-advisory, x_refsource_DEBIAN

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/29547
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30105
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30094
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/31043
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2008/0998/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.debian.org/security/2008/dsa-1535
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
Tags : vendor-advisory, x_refsource_MANDRIVA

CVE-2008-1233 : Detail