CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
97.5%
The Mozilla Foundation reports of multiple security issues
in Firefox, Seamonkey, and Thunderbird. Several of these
issues can probably be used to run arbitrary code with the
privilege of the user running the program.
MFSA 2008-19
XUL popup spoofing variant (cross-tab popups)
MFSA 2008-18
Java socket connection to any local port via LiveConnect
MFSA 2008-17
Privacy issue with SSL Client Authentication
MFSA 2008-16
HTTP Referrer spoofing with malformed URLs
MFSA 2008-15
Crashes with evidence of memory corruption (rv:1.8.1.13)
MFSA 2008-14
JavaScript privilege escalation and arbitrary code execution
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | firefox | < 2.0.0.13,1 | UNKNOWN |
FreeBSD | any | noarch | linux-firefox | < 2.0.0.13 | UNKNOWN |
FreeBSD | any | noarch | linux-firefox-devel | < 2.0.0.13 | UNKNOWN |
FreeBSD | any | noarch | seamonkey | < 1.1.9 | UNKNOWN |
FreeBSD | any | noarch | linux-seamonkey | < 1.1.9 | UNKNOWN |
FreeBSD | any | noarch | flock | < 1.1.1 | UNKNOWN |
FreeBSD | any | noarch | linux-flock | < 1.1.1 | UNKNOWN |
FreeBSD | any | noarch | thunderbird | < 2.0.0.14 | UNKNOWN |
FreeBSD | any | noarch | linux-thunderbird | < 2.0.0.14 | UNKNOWN |