9.3

CVE-2008-1235

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 2.0.0.12
Mozilla ≫ Firefox Version0.1
Mozilla ≫ Firefox Version0.2
Mozilla ≫ Firefox Version0.4
Mozilla ≫ Firefox Version0.5
Mozilla ≫ Firefox Version0.6
Mozilla ≫ Firefox Version0.6.1
Mozilla ≫ Firefox Version0.7
Mozilla ≫ Firefox Version0.7.1
Mozilla ≫ Firefox Version0.8
Mozilla ≫ Firefox Version0.9
Mozilla ≫ Firefox Version0.9.1
Mozilla ≫ Firefox Version0.9.2
Mozilla ≫ Firefox Version0.9.3
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0 Updatepreview_release
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.0.12
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
Mozilla ≫ Firefox Version2.0.0.4
Mozilla ≫ Firefox Version2.0.0.5
Mozilla ≫ Firefox Version2.0.0.6
Mozilla ≫ Firefox Version2.0.0.7
Mozilla ≫ Firefox Version2.0.0.8
Mozilla ≫ Firefox Version2.0.0.9
Mozilla ≫ Firefox Version2.0.0.10
Mozilla ≫ Firefox Version2.0.0.11
Mozilla ≫ Seamonkey Version <= 1.1.8
Mozilla ≫ Seamonkey Version1.0
Mozilla ≫ Seamonkey Version1.0 Updatealpha
Mozilla ≫ Seamonkey Version1.0 Updatebeta
Mozilla ≫ Seamonkey Version1.0.1
Mozilla ≫ Seamonkey Version1.0.2
Mozilla ≫ Seamonkey Version1.0.3
Mozilla ≫ Seamonkey Version1.0.4
Mozilla ≫ Seamonkey Version1.0.5
Mozilla ≫ Seamonkey Version1.0.6
Mozilla ≫ Seamonkey Version1.0.7
Mozilla ≫ Seamonkey Version1.0.8
Mozilla ≫ Seamonkey Version1.0.9
Mozilla ≫ Seamonkey Version1.1
Mozilla ≫ Seamonkey Version1.1 Updatealpha
Mozilla ≫ Seamonkey Version1.1 Updatebeta
Mozilla ≫ Seamonkey Version1.1.1
Mozilla ≫ Seamonkey Version1.1.2
Mozilla ≫ Seamonkey Version1.1.3
Mozilla ≫ Seamonkey Version1.1.4
Mozilla ≫ Seamonkey Version1.1.5
Mozilla ≫ Seamonkey Version1.1.6
Mozilla ≫ Seamonkey Version1.1.7
Mozilla ≫ Thunderbird Version <= 2.0.0.12
Mozilla ≫ Thunderbird Version0.1
Mozilla ≫ Thunderbird Version0.2
Mozilla ≫ Thunderbird Version0.3
Mozilla ≫ Thunderbird Version0.4
Mozilla ≫ Thunderbird Version0.5
Mozilla ≫ Thunderbird Version0.6
Mozilla ≫ Thunderbird Version0.7
Mozilla ≫ Thunderbird Version0.8
Mozilla ≫ Thunderbird Version0.9
Mozilla ≫ Thunderbird Version1.0
Mozilla ≫ Thunderbird Version1.0.2
Mozilla ≫ Thunderbird Version1.0.4
Mozilla ≫ Thunderbird Version1.0.5
Mozilla ≫ Thunderbird Version1.0.6
Mozilla ≫ Thunderbird Version1.0.7
Mozilla ≫ Thunderbird Version1.0.8
Mozilla ≫ Thunderbird Version1.5
Mozilla ≫ Thunderbird Version1.5.0.2
Mozilla ≫ Thunderbird Version1.5.0.4
Mozilla ≫ Thunderbird Version1.5.0.5
Mozilla ≫ Thunderbird Version1.5.0.7
Mozilla ≫ Thunderbird Version1.5.0.8
Mozilla ≫ Thunderbird Version1.5.0.9
Mozilla ≫ Thunderbird Version1.5.0.10
Mozilla ≫ Thunderbird Version1.5.0.12
Mozilla ≫ Thunderbird Version1.5.0.13
Mozilla ≫ Thunderbird Version1.5.0.14
Mozilla ≫ Thunderbird Version2.0.0.0
Mozilla ≫ Thunderbird Version2.0.0.4
Mozilla ≫ Thunderbird Version2.0.0.5
Mozilla ≫ Thunderbird Version2.0.0.6
Mozilla ≫ Thunderbird Version2.0.0.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.06% 0.924
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
http://secunia.com/advisories/29526
Vendor Advisory
http://secunia.com/advisories/29539
Vendor Advisory
http://secunia.com/advisories/29541
Vendor Advisory
http://secunia.com/advisories/29547
Vendor Advisory
http://secunia.com/advisories/29558
Vendor Advisory
http://secunia.com/advisories/29560
Vendor Advisory
http://secunia.com/advisories/29616
Vendor Advisory
http://secunia.com/advisories/29645
Vendor Advisory
http://secunia.com/advisories/30327
Vendor Advisory
http://secunia.com/advisories/30620
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
http://www.debian.org/security/2008/dsa-1532
http://www.debian.org/security/2008/dsa-1534
http://www.debian.org/security/2008/dsa-1535
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
http://www.securityfocus.com/archive/1/490196/100/0/threaded
http://www.securityfocus.com/bid/28448
http://www.ubuntu.com/usn/usn-592-1
http://www.us-cert.gov/cas/techalerts/TA08-087A.html
US Government Resource
http://www.vupen.com/english/advisories/2008/0998/references
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1793/references
Vendor Advisory
http://secunia.com/advisories/31043
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1
http://www.vupen.com/english/advisories/2008/2091/references
http://rhn.redhat.com/errata/RHSA-2008-0208.html
http://secunia.com/advisories/29391
Vendor Advisory
http://secunia.com/advisories/29548
Vendor Advisory
http://secunia.com/advisories/29550
Vendor Advisory
http://secunia.com/advisories/29607
Vendor Advisory
http://secunia.com/advisories/30016
Vendor Advisory
http://secunia.com/advisories/30094
Vendor Advisory
http://secunia.com/advisories/30105
Vendor Advisory
http://secunia.com/advisories/30192
Vendor Advisory
http://secunia.com/advisories/30370
Vendor Advisory
http://www.debian.org/security/2008/dsa-1574
http://www.kb.cert.org/vuls/id/466521
US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2008:155
http://www.mozilla.org/security/announce/2008/mfsa2008-14.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0207.html
http://www.redhat.com/support/errata/RHSA-2008-0209.html
http://www.securitytracker.com/id?1019694
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313
http://www.ubuntu.com/usn/usn-605-1
http://www.vupen.com/english/advisories/2008/0999/references
Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/41457
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10980