CVE-2008-5022
Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Mozilla>>Firefox >> Version From (including) 2.0 To (excluding) 2.0.0.18
- Mozilla>>Firefox >> Version 2.0 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.1 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.2 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.3 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.4 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.5 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.6 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.7 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.8 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.9 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.10 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.11 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.12 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.13 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.14 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.15 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.16 (Open CPE detail)
- Mozilla>>Firefox >> Version 2.0.0.17 (Open CPE detail)
Mozilla>>Firefox >> Version From (including) 3.0 To (excluding) 3.0.4
- Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
- Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
- Mozilla>>Firefox >> Version 3.0 (Open CPE detail)
- Mozilla>>Firefox >> Version 3.0.1 (Open CPE detail)
- Mozilla>>Firefox >> Version 3.0.2 (Open CPE detail)
- Mozilla>>Firefox >> Version 3.0.3 (Open CPE detail)
Mozilla>>Seamonkey >> Version From (including) 1.0 To (excluding) 1.1.13
- Mozilla>>Seamonkey >> Version 1.0 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.2 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.3 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.4 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.5 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.6 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.7 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.8 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.0.9 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.1 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.2 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.3 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.4 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.5 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.6 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.7 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.8 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.9 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.10 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.11 (Open CPE detail)
- Mozilla>>Seamonkey >> Version 1.1.12 (Open CPE detail)
Mozilla>>Thunderbird >> Version From (including) 2.0 To (excluding) 2.0.0.18
- Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.0 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.4 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.5 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.6 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.9 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.12 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.14 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.16 (Open CPE detail)
- Mozilla>>Thunderbird >> Version 2.0.0.17 (Open CPE detail)
Configuraton 0
Debian>>Debian_linux >> Version 4.0
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
- Debian>>Debian_linux >> Version 4.0 (Open CPE detail)
Configuraton 0
Canonical>>Ubuntu_linux >> Version 6.06
- Canonical>>Ubuntu_linux >> Version 6.06 (Open CPE detail)
Canonical>>Ubuntu_linux >> Version 7.10
- Canonical>>Ubuntu_linux >> Version 7.10 (Open CPE detail)
Canonical>>Ubuntu_linux >> Version 8.04
- Canonical>>Ubuntu_linux >> Version 8.04 (Open CPE detail)
Canonical>>Ubuntu_linux >> Version 8.10
- Canonical>>Ubuntu_linux >> Version 8.10 (Open CPE detail)
References
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230
Tags : vendor-advisory, x_refsource_MANDRIVA
Tags : vendor-advisory, x_refsource_MANDRIVA
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186
Tags : vdb-entry, signature, x_refsource_OVAL
Tags : vdb-entry, signature, x_refsource_OVAL
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
Tags : vendor-advisory, x_refsource_SUNALERT
Tags : vendor-advisory, x_refsource_SUNALERT
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDVSA-2008:228
Tags : vendor-advisory, x_refsource_MANDRIVA
Tags : vendor-advisory, x_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDVSA-2008:235
Tags : vendor-advisory, x_refsource_MANDRIVA
Tags : vendor-advisory, x_refsource_MANDRIVA
2025©
tesweb SA
