CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
97.9%
Mozilla security researcher moz_bug_r_a4 reported a series of vulnerabilities by which page content can pollute XPCNativeWrappers and have arbitrary code run with chrome privileges. One variant reported by moz_bug_r_a4 only affected Firefox 2.
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4058
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4059
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4060
bugzilla.mozilla.org/buglist.cgi?bug_id=444073,444075,444077
bugzilla.mozilla.org/buglist.cgi?bug_id=448548,451037
bugzilla.mozilla.org/show_bug.cgi?id=419848