CVE-2008-1233

CVSS V2 Medium 6.8 CVSS V3 None
Description
Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."
Overview
  • CVE ID
  • CVE-2008-1233
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2008-03-27T10:44:00
  • Last Modified Date
  • 2018-10-11T20:30:22
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* 1 OR 2.0.0.12
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* 1 OR 1.1.8
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 1 OR 2.0.0.12
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 6.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://www.mozilla.org/security/announce/2008/mfsa2008-14.html
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
http://www.debian.org/security/2008/dsa-1532
http://rhn.redhat.com/errata/RHSA-2008-0208.html
http://secunia.com/advisories/29391 Vendor Advisory
http://secunia.com/advisories/29560 Vendor Advisory
http://www.debian.org/security/2008/dsa-1534
http://www.debian.org/security/2008/dsa-1535
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080
http://www.redhat.com/support/errata/RHSA-2008-0207.html
http://www.ubuntu.com/usn/usn-592-1
http://www.us-cert.gov/cas/techalerts/TA08-087A.html US Government Resource
http://www.kb.cert.org/vuls/id/466521 US Government Resource
http://www.securityfocus.com/bid/28448
http://www.securitytracker.com/id?1019694
http://secunia.com/advisories/29548
http://secunia.com/advisories/29550
http://secunia.com/advisories/29539
http://secunia.com/advisories/29558
http://secunia.com/advisories/29616
http://secunia.com/advisories/29526
http://secunia.com/advisories/29541
http://secunia.com/advisories/29547
http://www.redhat.com/support/errata/RHSA-2008-0209.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
http://secunia.com/advisories/29645
http://secunia.com/advisories/29607
http://www.debian.org/security/2008/dsa-1574
http://secunia.com/advisories/30016
http://secunia.com/advisories/30094
http://secunia.com/advisories/30327
http://secunia.com/advisories/30370
http://secunia.com/advisories/31043
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1
http://www.mandriva.com/security/advisories?name=MDVSA-2008:155
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html
http://secunia.com/advisories/30192
http://secunia.com/advisories/30620
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
http://secunia.com/advisories/30105
http://www.ubuntu.com/usn/usn-605-1
http://www.vupen.com/english/advisories/2008/0998/references
http://www.vupen.com/english/advisories/2008/0999/references
http://www.vupen.com/english/advisories/2008/1793/references
http://www.vupen.com/english/advisories/2008/2091/references
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.447313
https://exchange.xforce.ibmcloud.com/vulnerabilities/41443
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11078
http://www.securityfocus.com/archive/1/490196/100/0/threaded
History
Created Old Value New Value Data Type Notes
2022-05-10 18:29:48 Added to TrackCVE